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(City and State) 


So ae 
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Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


C1 yes O wo 
Federal Taxpayer Information (FTI) 
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Description: [7] Original notes re interview of 


BWC toe /Bi 
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Séntindh Working Copy 


Lof2 


Lead Information 


Type: Action Required Created: 
09/17/2014 
Precedence: Routine . Due: 
11/16/2014 
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JACKSONVILLE, JK-3 
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Drafted By: 


ee 
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Case: Lead: 
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Details: 


(U) Please place the below item into a 1A and forward to case agent. 


1B1 
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LETTER AND ENVELOPE WITH WHITE POWDER (FL DEPT OF HEALTH LAB# 


022812-001, 2/28/2012, NO BIO-THREAT AGENTS DETECTED 


Please dispose of the below evidence associated with this case in 


accordance with FBI policies. 


1B2 


(4) Tubes Nuclear DNA - Secondary Evidence - Lab#120330012 


1B3 


Swab - NE1 - Secondary Evidence - Lab Number 120330012 ADI 


1B4 . 
Slides - TEU Secondary Evidence - Lab #120330012 


1B5 


~Photographs - LPOU Secondary Evidence ~ Lab# 120330012 
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To: JK-EVIDENCE 


Status: Assigned 
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Assigned: 09/17/2014 CS a | 
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b7Cc 
BIE 


9/17/2014 3:22 PM | 
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16449:12 FD-192 Page 1 
Tigle and Character of Case: 
GIRL SCOUTS OF AMERICA a 
Date Property Acquired: Source from which Property Acquired: 
GIRL SCOUTS OF AMERICA 
02/28/2012 1000 SHEARER RD ie 


JACKSONVILLE FL 32202 


Anticipated Disposition: Ss nae Case mune ; 


Date Entered 


Description of Property: 
1B 1 


LETTER AND ENVELOPE WITH WHITE POWDER 
(FL DEPT OF HEALTH LABH 022812-001, 2/28/2012, 
NO BIO-THREAT AGENTS DETECTED) 


Barcode: E4725339 Location: ECR P aie 03/05/2012 


amine 


E4725339 
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Special Handling Instructions 


Initial Receipt 


© Req. Charging None 
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Time 


Reason: 
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Time 


Signature: 
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Reason: 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 03/16/2012 
To: Laboratory Attn: Evidence Control Unit 
To: WMD Directorate Attn: WMD 
SSA 
TA 
To: Jacksonville Attn: Evidence Control Technician 


Evidence Technician 


From: Jacksonville 
Squad 3 
Contact: 


TFO 


b3 
Approved By: bé 

b7¢ 
Drafted By: DIE 


Case ID #: 


Title: GIRL SCOUTS OF AMERICA THREAT LETTER; VICTIM 
TREATEN OR ATTEMPT TO USE, POSSESS, 
TRANSPORTATION OF WMD 


Synopsis: Request forensic analysis (latent prints) of letters 
and envelope. 


Attachments: Laboratory Response Network (LRN) reports for the 
captioned evidence item(s), signed by an HMSRU Microbiologist. 


Package Copy: Being forwarded under separate cover is the 
following evidence (ee barcode number E4725339. 


Details: For information of the Laboratory Division, captioned 
investigation was initiated on 02/28/2012, when a threating 
letter was received at the Girl Scouts of America Corporate 
Headquarters. Located at 1000 Shearer Rd. Jacksonville FL, 32202. 


FBI JK AWMDC coordinated field screening with the 
Jacksonville Fire Rescue and HAZMAT team and Jacksonville 
Sheriff's Office Bomb Squad. FBI JK AWMDC transported the letter 


UNCLASSIFIED 
SHIPPING? 8.28 
Date? 2ottarl2 : 0.32 
ee SPECIAL: 
Re Wgtt 1-20 LBS HANDL ING? 0.80 


Dep? : 
7 3988 ove 9.00 TOTALS 5.86 


PRIORITY OVERNIGHT DSR 
sre ot: mOGB 1038 2979 


UNCLASSIFIED 


To: Jacksonville From: Jacksonville 
ner [ee] 03/36/2012 


to the LRN for testing. The substance but was identified on scene 
as Corn Starch ) Perera) On 03/05/2012, 
Florida Department 3 Cry reported no Dio-threat agents 


detected on samples taken from the letter. A copy of the lab 
report is enclosed with the evidence. Since the letter is 
negative for bio-threat agents, FBI Jacksonville does not 
consider it to be HAZMAT. 


Any questions can be directed to TFO 
Upon completion of examination, please return the 


evidence to Jacksonville's Evidence Control Technician, and 
forward a written report to TFO 
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FBI Laboratory Shipping invoice 
Federal Bureau of Investigation 
2501 Investigation Parkway 
Quantico, VA 22135 


Date: 05/05/2014 


To: 
FBI - Jacksonville 


Attn: ECT 
6061 Gate Parkway 
Jacksonville, FL 32256 


Telephone Number: (904 1248-7000 


Mail Room Stamps 


(Recipient) 


Carrier: 


\v) FedEx 
USPS Registered 
[_] Other. 


Classification Level: 
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Unclassified-Not Sensitive 
Unclassified-Sensitive 


L| Confidential 


Secret 


Special Services: 


Saturday Delivery  [[]_ Return Receipt (USPS only) 


Perishable Material* 


Fragile Materiai* 


Date: } 


Hazardous Material* 2 (Packaged by:, 
(Signature) 


*asierisked items must be described below. 


Description of Contents: 


Q1-Q3, NE1, nDNAU Secondary Evidence*, TEU Secondary Evidence, LPOU Secondary 


Evidence 
Evidence - requires immediate shipment 
*Requires refrigeration 


Declared Value $ V4 
(Required for International Shipments) 


FBI File #: Lab As): 
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b7c 
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Tracking Information: 


Point-of-Contact (Information: 


wawe[ ef 


Unit; ECU-Lab Rm: 1267 


Initials of rrenarer] _| 
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Federal Bureau of Investigation 
Laboratory Division 


LABORATORY WORK SHEET 


To: Jacksonville Date: April 4, 2012 
Squad 3 


Lab No: 120330012 ADI 

Reference: Communication dated March 16, 2012 

Your No.: 

Title GIRL SCOUTS OF AMERICA THREAT LETTER; VICTIM 
THREATEN OR ATTEMPT TO USE, POSSESS, 
TRANSPORTATION OF WMD 

Date specimens received: March 30, 2012 

Specimens: 

Qt Envelope addressed tf___—_—([Girl Scouts (1B1, B4725339) 

OQ Stamp from Q1 envelope (1B1, 24725339) 

Q1.2' — Stamp from Qt envelope (1B1, B4725339) 
rQT3 1 — Stamp from Q1 envelope (1B1, E4725339) 


'Qh4 ” Tape from the back of Q1 envelope (1BI, E4725339) 


£Q2. / Page beginning ou are..." (1B1, E4725339)} 
(Q3 \ Unknown substance (1B1, E4725339) 
NEif Swab 
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Secondary Evidence Inventory 


Trace Evidence Unit 


Lab #: 120330012 ADI AAW 


Date: 9/14/2012 


Initials{ | 


Q/K # | Slide(s) | Pillbox(es) | Paperfold(s) Other Notes 
QLi 1 
QL4 af 
Remarks: Page 1 of 1 
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Sentinel Working Copy 


Evidence Details 


oes [| mm 


Description: 
(U) (4) Tubes Nuclear DNA ~ Secondary Evidence - Lab#120330012 


Collected On: 05/07/2014 04:00 PM EST Eligible for Forfeiture: 


No 
Receipt Item #: None : Special Handling: 
Refrigerate 
CATS ID#: None Hazardous Materials: 
None 


FBI Seizure # None 
Late Justification: . 
(U) Entry Oversight of AECT due to workload. (Item was refrigerated 
upon arrival) 


Discovery Location 
Specific: Others: Secondary from LAB bie 


Anticipated Disposition 
None on None 


Storage Information 
Holding Office: JACKSONVILLE 


Finalized By: [sd Last Inventory: bé 
None b7c 


Location: 
B4412042 - ECR, GENERAL 
E5725009- - FRIGERATOR 2, ANALYZIED BY LAB 
COCO 


—_ Barcode #: E5043404 


Ciidin of Custody 
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Acquisition Event Detail: 


Acquisition Event: 
(0) Evidence Acquired 


a Collected ~ 


Collected From: 
(U) FBI Lab - Secondary Evidence 


tof? 6/6/2014 11:36 AM 


. 
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Collected On: 
05/07/2014 


Receipt Given: 
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Hoiding Office: 
JACKSONVILLE 
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? of 2 6/6/2014 11:36 AM 
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OO HAZMAT 
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Signature: . 
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Signature: 
Printed Name: 
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Signature: 


Printed Name: 


Reason: 


Signature: 
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Signature: 
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Reason: 


Signature: 
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Reason: 


Signature: 
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Reason: 


Signature: Signature: 
Printed Name: Printed Name: 
i Reason: Reason: 
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Printed? 


Case 1D 


Date: 
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Continuation Page 


Signature: 


Printed Name: 


Reason. 


Signature: 
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Signature: 
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Signature: 
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Signature: 
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b7c 


Items Delivered By Accepted By: Date BIE 


b3 


7 é 7 0 To extract 

Rl Yen) RG Men RO Las, ODEN CE | a| do ToGuantitention 
Bean + THRACE 4 'Ol 2-1 6 To amplification 

signonre UT cas 


S QIMNOVWS Tro (To Extraction 


iro Quantification 


~ one Q 11 “| O To Amplification 
OWON2 ft agengest Ne) Stem 


inate LOT. caa 


Sam oe OM ¢ 1 Yecuontnesten 
Woy ta) Tiguan 


iq)... | te ampitcaion 
| 12 Otecas 

0) To Extraction 

alse (1 To Quantification 

camps dom Aral aft] | ar amotionton 

Simonse O To CAG 

C1 To Extraction b6 

HA TUON OTE GRAG C} To Quantification | -b7C 
Koala trom Ais] fy Bikes STORAGE 424] r-| Lito ampiitication 
Oto CAS 


OI-10.0,GB-100, BBA “oats 
GB-B0  —__| EVIDENCESTORIGE ble7la.| bea 


Signature OT CAG 


Pin deen aa oe 
QR-2a0.n als) I ; " sat ! 
san ° | 
O To Extraction | 
xy YEG \ eS Seon) . I To Quantification i 
a ish EVIDENCE STORAG a fas.) 2 ecu 


Signore Oto cas 
CO To Extraction | 
1) To Quantification 
(0 To Amplification 
Signerure . Signature: UTocaG 

GO To Extraction 

O To Quantification 
(9 To Ampfification 
Signature Signature: Ci To CAG 


Page = of. tl 


rm 


Evidence Detaits 


CL] Case: [| item: 


Description: 
{U) Swab - NE1 ~- Secondary Evidence - Lab Number 120330012 ADI b3 
b6 
Collected On: 05/07/2014 04:00 PM EST Eligible for Forfeiture: b7c 
No DIE 
Receiptitem # None Special! Handling: 
. None 
CATS ID# None Hazardous Materiats: 
None 
FB) Seizure # None 
Late Justification: 
(U) Entry Oversight of AECT due to workload. 


Discovery Location 
Area: Collected By: 
Specific: Others: Secondary from LAB 


Anticipated Disposition 
None on None 


Storage Information 
Holding Office: JACKSONVILLE 


Finalized By: [i Last Inventory: vo Pe 
None 


| b7c 
Location: bTE 


E4412042 ~ ECR, GENERAL 


sasiidos © rensanes? Wc 


_ Barcode #: £5043405 . E5043405 


Tiiain of Custody 


Shipping / Transfer Log 
History 


Acquisition Event Detail: 


Acquisition Event: 
(U) Evidence Acquired 


Collected From: 
(U) FBI Lab ~ Secondary Evidence t 


tof? 6/6/2014 11:36 AM 


Sentingl Working Copy 
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2 of2 


Collected On: 


05/07/2014 


Receipt Given: 


No 


Holding Office: 


JACKSONVILLE 
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6/6/2014 11:36 AM 
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FD-1004 

Papen EVIDENCE CHAIN-OF-CUSTODY 

Evidence Type: OXGeneral O Drug O Firearm/Weapon 
O CART O Valuable O Firearm/Other 


Q Biohazard Oo FGI 
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G Batteries 

O HAZMAT 

Cl Req. Charging 
Q Other’ 


C Refrigerate 


Signature: 


Printed Name,_—~"| 
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ie 


Signature: 
Printed Name} 
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Signature: 


Printed Name: 


Reason: 


Signature: 


Signature: 
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Reason: 


Signature: 


Printed Name: 
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Reason: 
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Signature: Signature: 
Printed Name: Printed Name: 
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Date: 
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Evidence Details 


Case: Item: b3 
as e 
, BIC 


Description: PIE 
(U) Slides - TEU Secondary Evidence - Lab #120330012 
Collected On: 05/07/2014 04:00 PM EST Eligible for Forfeiture: 
No 
Receipt ltem #: None Special Handling: 
None 
CATSID# None Hazardous Materials: 
None 
FBI Seizure #: None 
Late Justification: 
(U) Entry Oversight of AECT due to workload. 
Discovery Location . 
a 
Specific: Others: Secondary from LAB 
Anticipated Disposition 
None on None 
Storage Information 
Holding Office: JACKSONVILLE 
Finalized By: [ti(i‘sés*q Last Inventory: 
None 
Location: 
#4412042 - ECR, GENERAL ‘ 
cg ie we 
= Barcode #: 5043406 - 5043406 
Ciidin of Custody 
Sipping / Transfer Log b3 
b6 
History bI7C 
bIE 


Acquisition Event Details| 


Acquisition Event: 
(U) Evidence Acquired 


Collected “ 


Collected From: 
(U) PBI Lab - Secondary Evidence 


J of2 6/6/2014 11:37 AM 


Sentinel Working Copy 


Collected On: 


05/07/2014 


Receipt Given: 


No 


Holding Office: 


JACKSONVILLE 


Evidence Log: 


b3 
b7E 


6/6/2014 11:37 AM 
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FD-1004 FEDERAL BUREAU OF INVESTIGATION 
eae. EVIDENCE CHAIN-OF-CUSTODY 
Evidence Type: General O Drug 0 Firearm/Weapon 
O CART C1 Valuable Ci Firearm/Other 


Batteries B Biohazard GO FGI Signature: 
HAZMAT O Latents QO Refrigerate 
Req. Charging None 

Other’ 
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Signature: Signature: 
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Signature: Signature: 
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Firearms Certification: 
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Description: 
(U) Photographs - LPOU Secondary Evidence - Lab# 120330012 ADI AER 


Collected On: 05/07/2014 04:00 PM EST Eligible for Forfeiture: 


No b3 
Receipt item #: None Special Handling: bé 
None ~ bic 
CATS ID#: None Hazardous Materials: DIE 
None 


FBI Seizure #: None 
Late Justification: 
(U) Entry Oversight of AECT due to workload. 


Discovery Location 
Area: Collected By: 
Specific: Others: Secondary from LAB 


Anticipated Disposition 
None on None 


Storage Information 
Holding Office: JACKSONVILLE 


] b3 
AN 2 Pees a 
None b7¢ 
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£4412042 - ECR, GENERAL 
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E5043407 


‘Ciidin of Custody 
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(U) Evidence Acquired 


' Collected a 


Collected From: " 
(U) FBI Lab - Secondary Evidence 


i of2 : 6/6/2014 11:37 AM 


Sentinel Working Copy DO 


Collected On: 
05/07/2014 


Receipt Given: 


No 
Holding Office: 
JACKSONVILLE 
Evidence Log: 
b3 
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6/6/2014 11:37 AM 


(12-19-12) 


LPU Secondary Evidence Log 


Lab #: 120330012 Date: 5/1/2013 
K/Qs Quantity Description 
Qi 8 Photographs 
Q2 iB i Photographs 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/29/2012 


To: WMD Directorate Attn: | 
SS. 


From: Jacksonville 
Squad 3/JTTF 
i Contact: TFO 


| Approved By: es 
Drafted By: ee 


Case ID #] 


Title: UNSUB, 
GIRL SCOUTS OF AMERICA THREAT LETTER; VICTIM 
THREATEN OR ATTEMPT TO USE, POSSESS, 

u TRANSPORTATION OF WMD 


CPI: ATPOOO 
WMDB 
DT-PO 


Synopsis: To request opening of Full Investigation and 
assignment of a new WMD matter. 


Enclosure(s): One copy of threat letter. 


Details: On 02/28/2012, FBI Jacksonville (JK) Field Office was 
notified of a letter with an unknown white powder within the 
envelope being received at the Girl Scouts of America Corporate 
Headquarters, 1000 Shearer Rd. Jacksonville FL 32202, The letter 
contained a threat to an employee and a white powder substance. 


FBI JK AWMDC coordinated field screening with the 
Jacksonville Fire Rescue HAZMAT team. The presumptive field 
screening determined that the substance was not a biological 


threat. The letter was transported to the Florida Department of 
Health for further testing. 
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UNCLASSIFIED 


To: WMD Directorate From: Jacksonville 
Re: 02/29/2012 


The above information establishes an articulable basis of 
criminal activity. As such, Jacksonville is opening a full 
investigation. 


LEAD (s) : 
Set Lead 1: (Info) 
WMD DIRECTORATE 


AT AT WMDOU/SE REGION, WASHINGTON DC 


For information only, read and clear. 
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O Yes {i No 
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03/05/12 : @ ICMIPRO1 


16:41:22 FD-192 Page 1 
Title and Character of Case: 
GIRL SCOUTS OF AMERICA 
Date Property Acquired: Source from which Property Acquired: 
GIRL SCOUTS OF AMERICA 
02/28/2012 1000 SHEARER RD 
JACKSONVILLE FL 32202 b6 
b7c 
Anticipated Disposition: ix By; Case Agent: 
Description of Property: Date Entered 
1B 1 
LETTER AND ENVELOPE WITH WHITE POWDER 
Barcode: E4725339 Location: 03/05/2012 


Case Number: 
Owning Office: JACKSONVILLE 


: e @ 
« (Rev. 05-01-2008) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 03/16/2012 
To: Laboratory Attn: Evidence Control Unit 
To: WMD Directorate Attn: WMDOU E_ Region 
SSA 
L. 
To: Jacksonville Attn: Evidence Control Technician 


[Soteneeyfechnicien [| 


From; Jacksonville 
Squad 3 
Contact: 


TFO 
Approved By: 


Drafted By: 


Title: GIRL SCOUTS OF AMERICA THREAT LETTER; VICTIM 
TREATEN OR ATTEMPT TO USE, POSSESS, 
TRANSPORTATION OF WMD 


Synopsis: Request forensic analysis (latent prints) of letters 
and envelope. 


Attachments: Laboratory Response Network (LRN) reports for the 
captioned evidence item(s), signed by an HMSRU Microbiologist. 


Package Copy: Being forwarded under separate cover is the 
following evidence,[—— barcode number E4725339. 


Details: For information of the Laboratory Division, captioned 
investigation was initiated on 02/28/2012, when a threating 
letter was received at the Girl Scouts of America Corporate 
Headquarters. Located at 1000 Shearer Rd. Jacksonville FL, 32202. 


FBI JK AWMDC coordinated field screening with the 
Jacksonville Fire Rescue and HAZMAT team and Jacksonville 
Sheriff's Office Bomb Squad. FBI JK AWMDC transported the letter 


UNCLASSIFIED 


b3 
b6 
b7C 
b7E 


® UNCLASSIFIED 


To: Jacksonville From: Jacksonville 
pee 09/36/2042 


to the LRN for testing. The substance but was identified on scene 
as Corn starch by the[ | On 03/05/2012, 
Florida Department of Health reported no bieo-threat agents 


detected on samples taken from the letter. A copy of the lab 
report is enclosed with the evidence. Since the letter is 


negative for bio-threat agents, FBI Jacksonville does not b3 
consider it to be HAZMAT. b6 
b7c 


Any questions can be directed to TFO BIE 


Upon completion of examination, please return the 
evidence to Jacksonville's Evidence Control Technician, and 
forward a written report to TFO 


UNCLASSIFIED 


2 


UNCLASSIFIED 
To: Jacksonville Prom: Jacksonville 


BIE 


LEAD (s): 
Set Lead 1: (Action) 
LABORATORY 
AT QUANTICO, VA 
Conduct forensic analysis (latent prints) of letter and 
envelope. Report results to Jacksonville. 
Set Lead 2: (Info) 
WMD DIRECTORATE 
AT WASHINGTON D.C. 
Read and clear. 
Set Lead 3: (Action) 
JACKSONVILLE 
AT JACKSONVILLE 


Attn: Evidence Technician, please send evidence to 
lab. 


+ 
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Sensitive But Undessined, 


Sonding Facility 


Ny 


ih PAR THI Pace, 


Sending Facitity + FLJacksanwitle.SPHL 
Sample. 
Somos 1 Soursa Dicotay Enslentor 
cae i. ‘ 
oRzai2 904 
Parent Sample a . Program 2 RNB 
event ID category + Environments 
‘Sample Type 1 Letter with poweler Suspect Agent 
Condition + Good * Sample Cottectod 
Commants : . Storage Location : 
Lonoitude . : tatiouse : 
Locator 1D : 
Sample Source : 
vests : 
‘Tex/assay Real-Time PCR 
“Tested Agent 3 Multiple agents 
Toxtod Molaty : 
Equipment Meats 2 ABS 7500 Fest OX . 
extraction Kt 2 MAQNA Pure Comoadt Nuctelc Acid Isolation Kit I - 
amptinestion Xit + Roehé FactStart DRA Master Hybridization Probes Kit pee 
‘orted Date 02/28/2022, 47:00 
Tasting Foculty L2N Labs Florida = Flortaa State Pubic Healtn Laboratory 
Tester 
Somareats 
Test Interpretation + nonregcuve for at tested agent ONA : 
Porameters/Mareere Result Date Valves - 
15 racovo 7 : 
pa aneraservg 
pad non-reactive 
oy nomeeactva a 
7 nonreactive 
HPS . Aodeneacliog 
03, non-reactivg 
Roz ponereactva 
THO sonensadiva . 
Teat/aasay Culture Identification 
ested Agent 2 Multiple Agents : 
Tested Motety 
Egulpment Medio 
Extraction srt . 
Ampiitication Kit 
Tested date 13/05/2012 10:30 . 
‘Teating Facility ‘LAN Lib: Florida ~ Florida State Publie Health Laboratory ‘ 
= — 
comments : 
‘oat Interpramtion + Culture negative . 
Pacomernre/tiorkere Result 
exctius antnraele No Growin . 
. urmolgoria malta & pseudomaltt No Grom 
. Francsata tularensis No Growth 
Yarznts pestle No Grown 
vestyarcay “Time-Ragolved Fluorescence (THF) $ 
Tested agont Ricinus communis & fic toxin 


1aHH 


Vr tAmaeane 


Tea GS:eT 


UNA 


Z102-GO-avAL 


b6 
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bTE 


SHO"a TYLOL 


ranean s 
« LRNRV V2 @ @ Page 2 of 2 
‘Tested Molety 
equipment sedi 
Extraction lt 
Amplification it 
Tested Onto ¢ 02/26/2012 17330 
‘Testing Pacifity 1_LRN Lab: Florida » Flonda State Publi¢ Henith Laboretary 
Tovter 
Comments 
Teat Interpretation + NO Hida toxin deemed by Muorsimmunoessay 
Patametore/Markers asutte pata Vatuas 
ikaton 8:50 so fluorescence Setected , 
‘Dilution 45200 4a Seoenacenca Cavactod a 
taton 32000 1 fyorarcsncn dorociet 
Ssmpic Reattive CHOP 
Semmmory 
‘Sttue + Testing Completed by lap 
Sonctuston Comments 
pigoot Feat 1 Multiple agante 
Conctusion + Negative for at agents testeg in multiple ogantzereen 
idoncfied Troe + 
Agent Toxted. + Ridaus communis & sen tox 
‘Cenclusion: 3 SegoUve tor Ricin Sonn and R. communis ONA 
identitled Fypar : 
b6é 
Senarove Gut Undlstilied. bre 
bIE 
NO PATHOGENS OR TOXIN s 
DETECTED PER LRN PROTOCO! . 
‘OK TO PROCEED TO FBI L 
icrobiologist, FMSRU 


§00°4 


Bad Nt deg IIIA Ore 


ann 


[ag 6SiEt ftOT-6O-YYW 


8 @ ¢ 


Dee A REE Rt NSH pen SS NERA TG NRE, 


i H 
Bureau of Laboratories COP Y’| x8 
P.O. Box 210 . sd 
Jacksonville, FL 32231 : is i 
904-791-1630/SC 366-1630 | 
: pr eT nny I 
Lab ID Number Date Received 7: 
f022812-001 J | 2Ae2017] ease Number: 19-152446 | : 
Sample Description a ; aa 
Letter/Envelope with powder ! 
Lenes/Envelope with powder 
incident Site ae ISounty ; 
11000 Shearer Ave.. Jacksonville, FL ji val 


(Report to Address : =a eee = ey 
01 East Bay Sect . 


cay ’ ~~ tate, |_7 Bip Sode 
| Packsonvillc 32202 ‘ 
Con 2 jdmber : 

a at 
BIS: 
bTE 


Fe ec ERROR RENAP A a NOON RSA cn ina baa (E22) 


Alternate Phone Numbers: 


RESULTS 


| 
: | (Culture Result ; Date Reported AD —~*«| 
| INO BIO-THREAT AGENTS DETECTED *| [- _ 3/5/2012 a: 


(Comments . ‘ : . nth ae 
* No Bacillus anthracis, Burkholderia spp., Francisella tularensis, Orthopoxvirus, Ricinus . 
communis (plant) or Yersinia pestis DNA detected in the environmental sample. No Ricin Toxin : 
detected by fluoroimmunoassay, No biothreat agents isolated on culture at 5 days. Rf 
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2501 Investigation Parkway 
FBI Laboratory Quantico, Virginia 22135 


REPORT OF EXAMINATION 
To: Jacksonville Date: April 19, 2012 
Squad 3 
be 
Lab No.: 120330012 ADI AAP Hs 


Reference: Communication dated March 16, 2012 
Your No.: 
Title: GIRL SCOUTS OF AMERICA THREAT LETTER; VICTIM 


THREATEN OR ATTEMPT TO USE, POSSESS, 
TRANSPORTATION OF WMD 


Date specimens received: March 30, 2012 
The items listed below were received in the Chemistry Unit: 


Q1 Envelope addressed {eins Scouts (1B1, E4725339) 


Q2 Page beginning [fou are...” (1B1, E4725339) 
Q3 Unknown substance (1B1, E4725339) 
NE1 Swab 


This report contains the results of the chemistry examinations. 


UNCLASSIFIED 


® UNCLASSIFIED @ 


Results of Examinations: 
The bulk of item Q3 was consistent with starch. 


Item Q3 was analyzed by the following techniques: visual and microscopic 
examination, infrared spectroscopy, and polarized light microscopy. 


Interpretations/Limitations: 

The terminology “consistent with" does not imply an identification of a specific 
chemical or product. A substance is termed "consistent with" when the analytical data does not 
support an identification of a specific chemical or product, but does provide reliable information 
to include the substance within a class of materials. The phrase "consistent with" is also used 
when an appropriate reference standard could not be obtained. 

Remarks: 


Items Q1-Q2 and NE1 were not examined in the Chemistry Unit. 


The supporting records for the opinions and interpretations expressed in this report 
are retained in the FBI files. 


The items listed above will be returned under separate cover of communication. 
= about the content of this report, please contact Exathine] 


For questions about the status of your submission, includin, 
examinations, please contact Request Coordinator 


al 


b6 
bIC 
bIE 


Chemistry Unit 


This report contains the opinions/interpretations of the examiner(s) who issued the report. 
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FD-919 (Rev, 06-05-2003) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/24/2012 


To: Jacksonville 


From: Jacksonville 
Squad 4, 
Contact: 


Approved By 
Drafted By: 


Case ID #: 


Title: VICTIM NOTIFICATION FORM 


Synopsis: WMD: THREATS 


Reference: [ 


Details: 


VusCase#: 
CAgtName: 
PContact: Person 
BusName 

BusEIN 

BusAcct 

VicFrirNn 

VicMidN 
VicLastN: 

SSAN : 000000000 
VicDate : 20120228 
VicDOD 

VicMinor: 

DOB 

Race 

Sex 

Addr 

Addr2 

City 

State 

Country 

Zip 

Email 

HPhone 

Fax 


b6 
b7c 


b3 
be 
b7Cc 
BIE 


ki 


To: i m: Jacksonville 
Re: 04/24/2012 


VilrkAddr: 
VWirkadd2: 
VWrkCity: 
VWekSt oo: 
VirkCtry: 
VWrkZip 
WEmail 
WPhone 
WEax 
VicPager: 
NOKFirN : 
NOKMiaN : 
NOKLastN: 
NOKRel : 
NOKAddr : 
NOKAddr2: 
NOKCity : 
NOKState: 
NOKCtry 
NOKZip : 
NOKHEmal : 
NOKWEmal : 
NOKHPho 
NOKWPho 
NOKHFax 
NOKWFax 
NOKPager: 
GraFirN 
GraMidNn 
GrdLastN: 
GrdRel 
GrdAddr : 
GrdAddr2: 
Grdcity 
GrdState: 
Grdctry 
GrdZip : 
GrdhEmal: 
GrdwWEmal: 
GrdHPho 
GxrdwWwPho 
GrdFax 
GrdWPFax 
GrdPager: 
PropRet 
TotLoss 
Lang. 
Disable 


Girl Scouts of America 
1000 Shearer Road 
Jacksonville 

FL 

US 

32202 


Y¥ 
000000000 
EN 


b3 
bIE 


aad 


aa 18 ami 


Jacksonville 
04/24/2012 


BIE 
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FD-919 (Rev, 06-05-2003) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/24/2012 
To: Jacksonville 
From: Jacksonville 


Squad 4, Victim Aspistance Section 
Contact: 


Approved By: 
Drafted By: 


Case ID #: 


Title: VICTIM NOTIFICATION FORM 


Synopsis: WMD: THREATS 


Reference: [| 


Details: 


VnsCase#: 
CAgtName: 
PContact: Person 


BusName 
BusEIN 
BusAcct 


VicFirN : b6 
VicMidN : b7C 
VicLastN: 


SSAN : 060000000 
VicDate : 20120228 
VicbDOD 

VicMinor 

DOB 

Race 

Sex 

Addr 

Addr2 

city 

State 

Country 

Zip 

Email 

HPhone 

Fax 


WT ANG 


To: i : dacksonville 
Re: 04/24/2012 2 


VWrkAddr: Girl Scouts of America 
VWrekadd2: 1000 Shearer Road 
ViekCity: Jacksonville 
VWrekSst oo: FL 
VWxekCtry: US 
VilekZip : 32202 
WEmail 

WPhone 

WEax 

VicPager: 
NOKFirN 

NOKMidN ;: 
NOKLastN: 
NOKRel 

NOKAddr : 
NOKAddr2: 
NOKCity : 
NOKState: 
NOKCtry 

NOKZip 
NOKHEmal: 
NOKWEmal: 
NOKHPho 

NOKWPho 

NOKHFax 

NOKWFax 
NOKPager: 
GrdFirn 

GrdMidN : 
GrdLastN: 
GrdRel 

GrdAddr : 
GrdAddr2: 
Grdcity 
GrdState: 
Grdctry 

GrdZip : 
GrdaHEmal: 
GrdwWEmal : 
GrdHPho : 
GrdwPho 

GrdHFax 

GrdWPax 
GrdPager: 
PropRet : Y 
TotLoss : 000000000 
Lang. : EN 
Disable 


To: 


+ 


& ‘ 


Jacksonville 


From: Jacksonville 
04/24/2012 


bIE 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/24/2012 
To: Jacksonville | 

| 
From: Jacksonville 


Squad 4, 
Contact: 


b3 
be 
b7Cc 
B7E 


Approved By 
Drafted By: 


Case ID #: 


Title: VICTIM NOTIFICATION FORM 


Synopsis: WMD: THREATS 


| 


Details: 


VnsCase#: ; 
CAgtName: 

PContact: Person 

BusName 

BusEIN 

BusAcct : bé 
VicFirN pyc 
VicMidN 

VicLastN: 

SSAN : 000000000 

VicDate : 20120228 

VicDOp 

VicMinor 

DOB 

Race 

Sex 

Addr 

Addr2 

city : 

State : 

Country 

Zip 

Email 

HPhone 

Fax 


wT pan 


wae 


oo. e 
To: Ja i m: Jacksonville 
Re: 04/24/2012 


VWrkAddr: Girl Scouts of America 
VWrkadd2: 1000 Shearer Road 
VWrkCity: Jacksonville 

VarkSt o: FL 

VWrkCtry: US 

VWWrkZip : 32202 

WEmail 
WPhone 
Wrax 
VicPager 
NOKFirN 
NOKMiaN 
NOKLastN: 

NOKRelL 

NOKAddr : 
NOKAddr2: 

NOKCity 

NOKState: 

NOKCtry 

NOKZip : 
NOKHEmal: 
NOKWEmal: 

NOKHPho 

NOKWPho 

NOKHFax 

NOKWPFax 

NOKPager: 

GrdFirN 

GrdMidn 

GrdLastN: 

GrdRel 

GrdAddr : 

GrdAddr2: 

Grdcity 

GrdState: 

GrdCtry : 

GrdZip 

GrdHEmal: 
GrdwWEmal: 

GrdHPho 

GrdWPho 

GrdHFax 

GrdWFax 

GrdPager: 

PropRet : ¥ 
TotLoss : 000000000 
Lang. : EN 
Disable 


| 
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b7E 
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. + 
Jacksonville From: Jacksonville 


04/24/2012 b3 
bIE 


te 


FEDERAL BUREAU OF INVESTIGATION 
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FD-919 (Rev. 06-05-2003) 


Precedence: ROUTINE Date: 04/24/2012 


To: Jacksonville 


From: Jacksonville 
Squad 4, 
Contact: 


Approved B: 


Drafted By 


Case ID #: 


Title: VICTIM NOTIFICATION FORM 


Synopsis: WMD: THREATS 


Reference: [ 


Details: 


CAgtName: 
PContact: Business 
BusName : Girl Scouts of America 
BusEIN +: 000000000 
BusAcct 

VicFixN 

VicMidN 

VicLastN: 

SSAN : 

VicDate : 20120228 
vicDOD 

VicMinor: 

DOB 

Race 

Sex : 

Addr : 

Addr2 : 

City : 

State : 

Country 

Zip 

Email 

HPhone 

Fax 


7 L.aa 


b3 
be 


B7C | 


B7E 


bé 
b7c 


be 


4 


e a % 
To: Jacksonville From: 


Re: 


VWrkAddr: 
VWrkadd2: 
VWxekCity: 


VWeksSt 


vwrkCtry: 


ViirkZip 
WEmail 
WPhone 
WRax 


VicPager: 


NOKFirN 
NOKMidN 


NOKLastn 


NOKRel 
NOKAddr 
NOKAddr2 
NOKCity 
NOKState 
NOKCtry 
NOKZip 


NOKHEmal : 


NOKWEmal 
NOKHPho 
NOKWPho 
NOKHFax 
NOKWFax 
NOKPager 
GrdFircN 
GrdMidN 
GrdLastNn 
GrdRel 
GrdAddr 
GrdAddr2 
Grdcity 
GrdState 
Gractry 
GrdZip 
GrduEmal 
GrdWEmal 
GrdHPho 
GrdWPho 
GrdHFax 
GrdWFax 
GrdPager 
PropRet 
TotLoss 
Lang. 
Disable 


Corporate Headquarters 
1000 Shearer Road 
Jacksonville 

FL 

US 

32202 


Y 
000000000 
EN 


Jacksonville 
04/24/2012 
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To: Jacksonville From: Jacksonville 
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FD-919 (Rev. 06-05-2003) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/24/2012 
To: Jacksonville 


From: Jacksonville 


Squad 4, 

Contact: 
Approved By: ee ; 
Drafted By: me 
Case ID #: 


Title: VICTIM NOTIFICATION FORM 


Synopsis: WMD: THREATS 


Details: 


vnsCase#: 
CAgtName: 
PContact: Person 
BusName 

BusEIN 

BusAcct 

VicFirN 

VicMidN 
VicLastN: 

SSAN : 000000000 
VicDate : 20120228 
VicDOD : 
VicMinor: 

DOB : 

Race 

Sex 

Addr 

Addr2 

City 

State 

Country : 

Zip 

Email 

HPhone 

Pax 


wba 3 | be 


VWrkAddr: 
VWrkadd2: 
VWrkCity: 


VWrkst 


viekCtry: 


VWrkZip 
WEmail 
WPhone 
WFax 


VicPager: 


NOKFirN 
NOKMidN 


NOKLastN: 


NOKRelL 
NOKAddr 


NOKAddr2: 


NOKCity 


NOKState: 


NOKCtry 
NOKZip 


NOKHEmal : 
NOKWEmal: 


NOKHPho 
NOKWPho 
NOKHFax 
NOKWFax 


NOKPager: 


GrdFirNn 
GrdMidN 


GrdLastN: 


GrdRel 
GrdAddr 


GrdAddr2: 


Grdcity 


GrdState: 


Grdctry 
GrdZip 


GxdHEmal : 
GrdwWEmal: 


GrdHPho 
GrdwWPho 
GrdHFax 
GrdWFax 


GrdPager: 


PropRet 
TotLoss 
Lang. 

Disable 


To: i : 
Re: 


Girl Scouts of America 
1000 Shearer Road 
Jacksonville 

FL : 


Y 
000000000 
EN 


Jacksonville 
04/24/2012 
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Re: 


AA 


+ 
Jacksonville 


From: Jacksonville 
04/24/2012 


b3 
bIE 


U.S. Department of Justice 
Federal Bureau of investigation 
FBI - Jacksonville 

6061 Gate Parkway 
Jacksonville, FL 32256 
Phone: (904) 248-7410 

Fax: (904) 248-7137 


April 30, 2012 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Road 
Jacksonville, FL 32202 


Re: Case Number] bic 
Dea 


As a Victim Specialist with FBI - Jacksonville, I'm contacting you because we have identified you as a 
possible victim of a crime 


This case is currently under investigation. A criminal investigation can be a lengthy undertaking, and, 
for several reasons, we cannot tell you about its progress at this time. But we can do this: We have enclosed a 
brochure about the FBI's victim assistance program. The brochure will introduce you to this program and to 
available FBI assistance for victims. A victim of a federal crime is entitled to receive certain services, such as 
information regarding available emergency medical and social services; available public and private programs 
for counseling, treatment, and other support: and notice of certain events in the progress of the case. The 
enclosed brochure will discuss those services and others (for further details, please refer to Title 42 United 
States Code Section 10607 and/or the brochure posted on www. notify.usdoj.gov). 


The Victim Notification System (VNS) is designed to provide you with direct information regarding the 
case as it proceeds through the criminal justice system. You may obtain current information about this matter 
on the Internet at www.notify, usdoi.gov or from the VNS Call Center at 1-866-DOJ-4YOU (1-886-365-4968) 
(TOD/TTY: 1-866-228-4619} (International: 1-502-213-2767). In addition, you may use the Call Center or 
Internet to update your contact information and/or change your decision about participation in the notification 
program. If you update your information to include a current email address, VNS will send information to that 
address. You will use your Victim identification Number (ViN| nd Personal Identification Number 
(Pin)L___Janytime you contact the Call Center and anytime you log on to the VNS web site. If you are 
receiving notifications with multipte victim ID/PIN codes please contact the VNS Call Center. In addition, the 


first time you access the VNS internet site, you will be prompted to enter your last name (or business name) as 
currently contained in VNS. The name you should enter | 

You can also use the Call Center and the Internet to correct/update your contact information and/or 
change your decision regarding participation in the notification system. Please remember however, that the 
first time you access the VNS internet site, you will be prompted to enter your last name (or business name) 


and need to enter it as currently contained in VNS and spelled within this letter. Your participation in this 
notification system is totally voluntary. You can choose not to participate or reactivate your access at any time. 


If you have any concern regarding the validity of this letter or would like to speak with me regarding 
any questions you may have, please feel free to call me at the number listed above. When you call, so that | 
can assist you as promptly as possible, please provide me the file number listed at the top of the letter. 


Sincerely, 


Royce E. Curtin, Acting 
Special Agent in Charge 


Victim Specialist 


be 
b7Cc 


-, ©@ e 
U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 
6061 Gate Parkway 
Jacksonville, FL 32256 
Phone: (904) 248-7410 
Fax: (904) 248-7137 


April 30, 2012 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Road 
Jacksonville, FL 32202 


Re: Case Number} 
Deai 


As a Victim Specialist with FBI - Jacksonville, I'm contacting you because we have identified you as a 
possible victim of a crime. 


This case is currently under investigation. A criminal investigation can be a lengthy undertaking, and, 
for several reasons, we cannot tell you about its progress at this time. But we can do this: We have enclosed a 
brochure about the FBI's victim assistance program. The brochure will introduce you to this program and to 
available FBI assistance for victims. A victim of a federal crime is entitled to receive certain services, such as 
information regarding available emergency medical and social services; available public and private programs 
for counseling, treatment, and other support; and notice of certain events in the progress of the case, The 
enclosed brochure will discuss those services and others (for further details, please refer to Title 42 United 
States Code Section 10607 and/or the brochure posted on www.notify.usdoj.gov). 


The Victim Notification System (VNS) is designed to provide you with direct information regarding the 
case as it proceeds through the criminal justice system. You may obtain current information about this matter 
on the Internet at www.notify.usdoj.gov or from the VNS Call Center at 1-866-DOJ-4YOU (1-866-365-4968) 
(TDD/TTY: 1-866-228-4619) (International: 1-502-213-2767). In addition, you may use the Cail Center or 
Internet to update your contact information and/or change your decision about participation in the notification 
program. If you update your information to include a current i ss, VNS will send information to that 
address. You will use your Victim Identification Number WIN fend Personal Identification Number 

| (PIN hnytime you contact the Cal! Center and anytime you [og on to the VNS web site. If you are 
receiving notifications with multiple victim ID/PIN codes please contact the VNS Calf Center. In addition, the 
first time you access the VNS Intemet site, you will be prompied to enter your last name (or business name) as 
currently contained in VNS. The name you should enter | 


You can also use the Call Center and the Internet to correct/update your contact information and/or 
change your decision regarding participation in the notification system. Please remember however, that the 
first time you access the VNS Internet site, you will be prompted to enter your last name (or business name) 
and need to enter it as currently contained in VNS and spelled within this letter. Your participation in this 
notification system is totally voluntary. You can choose not fo participate or reactivate your access at any time. 


If you have any concern regarding the validity of this !etter or would like to speak with me regarding 
any questions you may have, please feel free to call me at the number listed above. When you call, so that | 
can assist you as.promptly as possible, please provide me the file number listed at the top of the letter. 


Sincerely, 


Royce E, Curtin, Acting 
Special Agent in Charge 


Victim Specialist 


be 
b7C 


‘ ~~ 

oa © rd] 
U.S. Department of Justice 
Federal Bureau of investigation 
FBI - Jacksonville 
6061 Gate Parkway 
Jacksonville, FL 32256 
Phone: (904) 248-7410 
Fax: (904) 248-7137 


April 30, 2012 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Road 
Jacksonville, FL 32202 


Re: Case Numbe] 


As a Victim Specialist with FBI - Jacksonville, I'm contacting you because we have identified you as a 
possible victim of a crime. 


This case is currently under investigation. A criminal investigation can be a lengthy undertaking, and, 
for several reasons, we cannot tell you about its progress at this tine. But we can do this: We have enclosed a 
brochure about the FBI's victim assistance program. The brochure will introduce you to this program and to 
available FBI assistance for victims. A victim of a federal crime is entitled to receive certain services, such as 
information regarding available emergency medical and social services; available public and private programs 
for counseling, treatment, and other support; and notice of certain events in the progress of the case, The 
enclosed brochure will discuss those services and others (for further details, please refer to Title 42 United 
States Code Section 10607 and/or the brochure posted on www-notify.usdoj.gov). 


The Victim Notification System (VNS) is designed to provide you with direct information regarding the 
case as it proceeds through the criminal justice system. You may obtain current information about this matter 
on the Internet at www.notify.usdoj.gov or from the VNS Call Center at 1-866-DOJ-4YOU (1-866-365-4968) 
(TDD/TTY: 1-866-228-4619) (International: 1-502-213-2767). In addition, you may use the Call Center or 
Internet to update your contact information and/or change your decision about participation in the notification 
program. If you update your information to include a current email ess, VNS will send information to that 
addre; will use your Victim Identification Number i a and Personal Identification Number 
(PIN) nytime you contact the Call Center and anytime you log on to the VNS web site, If you are 
receiving notifications with multiple victim ID/PIN codes please contact the VNS Call Center. In addition, the 
first time you access the VNS internet site, you will be prompted to enter your last name (or business name) as 
currently contained in VNS. The name you should enter qd 


You can also use the Cail Center and the Internet to correct/update your contact information and/or 
change your decision regarding participation in the notification system. Please remember however, that the 
first time you access the VNS Internet site, you will be prompted to enter your last name (or business name) 
and need fo enter it as currently contained in VNS and spelled within this letter. Your participation in this 
notification system is totally voluntary. You can choose not to participate or reactivate your access at any time. 


lf you have any concern regarding the validity of this letter or would like to speak with me regarding 
any questions you may have, please feel free to call me at the number listed above. When you call, so that [ 
can assist you as promptly as possible, please provide me the file number listed at the top of the letter. 


Sincerely, 


Royce E. Curtin, Acting 
Special Agent in Charge 


1 ve 
ictim Specialist b7c 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gate Parkway 
Jacksonville, FL 32256 
Phone: (904) 248-7410 

Fax: (904) 248-7137 


April 30, 2012 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Road 
Jacksonville, FL 32202 


Re: Case Numbe| 
b3 
cee ie 


b7c 


As a Victim Specialist with FBI - Jacksonville, I'm contacting you because we have identified you as a BIE 


possible victim of a crime. 


This case is currently under investigation. A criminal investigation can be a lengthy undertaking, and, 
for several reasons, we cannot telt you about its progress at this time. But we can do this: We have enclosed a 
brochure about the FBI's victim assistance program. The brochure will introduce you to this program and to 
available FBI assistance for victims. A victim of a federal crime is entitted to receive certain services, such as 
information regarding available emergency medical and social services; available public and private programs 
for counseling, treatment, and other support; and notice of certain events in the progress of the case. The 
enclosed brochure will discuss those services and others (for further details, please refer to Title 42 United 
States Code Section 10607 and/or the brochure posted on www.notify.usdoj.qov). 


The Victim Notification System (VNS) is designed to provide you with direct information regarding the 
case as it proceeds through the criminal justice system. You may obtain current information about this matter 
‘on ihe Internet at www.notify.usdoj.gov or from the VNS Call Center at 1-866-DOJ-4YOU (1-866-365-4968) 
(TDD/TTY: 1-866-228-4619) (International; 1-502-213-2767). In addition, you may use the Call Center or 
Internet to update your contact information and/or change your decision about participation in the notification 
program. If you update your information to include a current H ss, VNS will send information to that 
address. You will use your Victim Identification Number Fv a PO Personal Identification Number 
(PIN, ___fnytime you contact the Call Center and anytime you fog on to the VNS web site. If you are 
receiving notifications with multiple victim ID/PIN codes please contact the VNS Call Center. In addition, the 
first time you access the VNS Internet site, you will be pro er your last name (or business name) as 
currently contained in VNS. The name you should enter : | 


You can also use the Call Center and the Internet to correct/update your contact information and/or 
change your decision regarding participation in the notification system. Please remember however, that the 
first time you access the VNS Internet site, you will be prompted to enter your last name (or business name) 
and need to enter it as currently contained in VNS and spelled within this letter. Your participation in this 
notification system is totally voluntary. You can choose not to participate or reactivate your access at any time. 


If you have any concern regarding the validity of this letter or would like to speak with me regarding 
any questions you may have, please feel free to call me at the number listed above, When you call, so that 
can assist you as promptly as possible, please provide me the file number listed at the top of the letter. 


Sincerely, 


Royce E. Curtin, Acting 
Special Agent in Charge 


Victim Specialist 


b6 
bIC 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gate Parkway 
Jacksonville, FL 32256 
Phone: (904) 248-7410 

Fax: (904) 248-7137 


April 30, 2012 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Road 
Jacksonville, FL 32202 


Re: Case Number; 


Deal b3 
bé 
As a Victim Specialist with FBI - Jacksonville, I'm contacting you because we have identified you as a bic 
possible victim of a crime. bIE 


This case is currently under investigation. A criminal investigation can be a lengthy undertaking, and, 
for several reasons, we cannot tell you about its progress at this time. But we can do this: We have enclosed a 
brochure about the FBI's victim assistance program. The brochure will introduce you to this program and to 
available FBI assistance for victims. A victim of a federal crime is entitled to receive certain services, such as 
information regarding available emergency medical and social services; available public and private programs 
for counseling, treatment, and other support; and notice of certain events in the progress of the case. The 
enciosed brochure will discuss those services and others (for further details, please refer to Title 42 United 
States Code Section 10607 and/or the brochure posted on www.notify.usdoj.dov). 


The Victim Notification System (VNS) is designed to provide you with direct information regarding the 
case as it proceeds through the criminal justice system. You may obtain current information about this matter 
on the Internet at www.notify.usdoj.gov or from the VNS Call Center af 1-866-DOJ-4YOU (1-866-365-4968) 
{TDD/TTY: 1-866-228-4619) (International: 1-502-213-2767). in addition, you may use the Cali Center or 
tnternet to update your contact information and/or change your decision about participation in the notification 
program. If you update your information to include a current email address, VNS will send information to that 
addre; will use your Victim Identification Nurnber (VIN)L___Jand Personal Identification Number 
(PIN) nytime you contact the Call Center and anytime you log on to the VNS web site. If you are 
receiving notifications with multiple victim ID/PIN codes please contact the VNS Call Center. In addition, the 
first time you access the VNS Internet site, you will be prompted fo enter your last name (or business name) as 
currently contained in VNS. The name you should enter d 


You can also use the Cali Center and the Internet to correct/update your contact information and/or 
change your decision regarding participation in the notification system. Please remember however, that the 
first time you access the VNS Internet site, you will be prompted to enter your last name (or business name) 
and need to enter it as currently contained in VNS and spelled within this letter. Your participation in this 
notification system is totally voluntary. You can choose not to participate or reactivate your access at any time. 


If you have any concern regarding the validity of this letter or would tike to speak with me regarding 
any questions you may have, please feel free to call me at the number listed above. When you call, so that | 
can assist you as prompily as possible, please provide me the file number listed at the top of the letter. 


Sincerely, 


Royce E. Curtin, Acting 
Special Agent in Charge 


eemree bs 
Ictin Specialist bIC 


UNCLASSIFIED 


459-542 fRev, 03-23-2009) 
FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/27/2012 


fo: Jacksonville Attn: sal otc 


From: Jacksonville 
! Squad 3/JTTF 
Contact:  TFO 


b3 
Approved By b6 
BIC 
Drafted By: bIE 


Case ID #: 


Title: WEAPONS OF MASS DESTRUCTION 
JACKSONVILLE DIVISTON 
SOUTHEAST OPERATIONS 

: WMD RESPONSE 


Synopsis: To claim statistical accomplishment. 


Details: On 02 February 2012 trol __ Jresponded with 
Jacksonville Sheriff's Office Bomb Squad and Jacksonville Fire 
Rescue to a unknown white powder within an envelope received at 
the Girl Scouts of America Corporate Headquarters. 


The response was documented under Case od 


Case is currently pending laboratory results. 


UNCLASSIFIED 


To: i rom: Jacksonville 
Re: 04/27/2012 


Accomplishment Information: 


UNCLASSIFIED 


Numbe 


Type: 
ITvU: 


Claimed By, 
SSN: 
Name: 


Squad: 3 


Number: 
Type: 
ITU: WMD/CP PROGRAM 
Claimed By; 
SSN: 
Name: 


Squad; 3 


Number: 

Type: 

ITU: 

Claimed By- 
SSN: 
Squad: 3 


Number : 
Type: 
ITU: WMD/CP PROGRAM 
Claimed By; 
Name: 
Squad: 3 


Number: 
Type: 
ITU: 
Claimed By; 
SSN: 
Name: 
Squad: 3 
Number; 
Type: 
ITU: WMD/CP PROGRAM 
Claimed By: 
UNCLASSIFIED 


2 


b75 


b6 
b7C 
bIE 


be 
b7c 
BIE 


> UNCLASSIFIED td 


To: Jacksonville From: Jacksonville 


‘ype: 
ITU: WMD/CP PROGRAM 


Claimed By 
SSN: re 
Name: b7c 


Squad: 3 b7E 


Number: 


Type: 
ITU: WMD/CP PROGRAM 


Claimed By; 
SSN: 
Name: 


Squad: 3 


+ 


UNCLASSIFIED 
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FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 
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FD-1936 (Rev. 10-16-2009) 
UNCLASSIFIED 
FEDERAL BUREAU OF INVESTIGATION 
Import Form 
Form Type: OTHER Date: 07/18/2012 


bb 
bic 


Case ID #: (U) UNSUB; 
GIRL SCOUTS OF AMERICA THREAT 
LETTER-VICTIM; 
DT-OPERAT IONS 


Synopsis: (U) 


++ 


UNCLASSIFIED 


| 


UNCLASSIFIED//Foue- 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


FD-1057 (Rev. 5-8-10} 


Title: (U//Fe86) To Serialize 1A Date: 08/08/2012 


From: JACKSONVILLE 
JK-3 


b6 


b7C 


Case ID #: (U) UNSUB; 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERAT IONS 


Synopsis: (U//#680) Notes and statement received from Baretivel =] 
of the Jacksonville Sheriff's Office. Notes and statement taken 
by Det. 


Full Investigation Initiated: 02/28/2012 
Enclosure(s): Enclosed are the following items: 


1s (U//PEY@) Notes and statement received from Detective 
of the Jacksonville Sheriff's Office. Notes and statement taken by Det. 


Details: 

Notes and statement received from Detectivel ido the te 
Cc 

Jacksonville Sheriff's Office. Notes and statement taken by Det. [| 


Ld 


++ 


UNCLASSIFIED//Feuo- 


Physical 


Created From: 


Package: 
Stored Location: 
Summary: 


Acquired By: 
Acquired On: 
Acquired From: 


Attachment : 


UNCLASSIFIED/ /Feee 
1A/1C Cover Sheet for Serial Export 


None 


(U//PObS} Notes and 
statement received from 
Detective of 
the Jacksonville 
Sheriff's office. Notes 
and statement taken by 


Det. 

2012-02-28 
an 

Jso 


(U//S886) Motes and 


statement i om 
Detective of 
the Jacksonville 


Sheriff's Office. Notes 
and statement taken by 
Det. 


se 


UNCLASSIFIED/ /#eve 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


FD-1036 (Rev. 10-16-2009) 


Form Type: OTHER Date: 09/24/2012 


Title: (U//Pe8e) Lab Results and Copy of White Powder Letter Sent To 
Girl Scouts 


A a 7 b3 
pproved By: bé 
b7Cc 


eee ey [sid — 
Case ID ef (U) UNSUB; 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERAT IONS 


Synopsis: (U//BEBe) Lab Results and Copy of Envelope and White Powder 
Letter Sent To Girl Scouts 


+ 


UNCLASSIFIED//2O8e 


. DEPARTMENT OF FUSTICE 
Al, BUREAU OF INVESTIGATION 
Recelpt far Property Reveived/Reterued/ Reeaned beized 


Ore (date) 


A 


Atte Sy 
emoL | 


(Street Addn 


ty, State} 


Herne 


ERaoel 


Received tof Revelved frar 


beé 
b7Cc 


JH, Fesnk Parmer, Jy, MD. 8D. FAC. 
Rare Surgeon Geaeest 


Rick Seat 
Sovernpr 


FLORIDA BUREAU OF LABORATORIES CHAIN OF CUSTODY 


be 
bICc 


Delivered io the Lat 
: Laboratory Custody] 
; Pratest Senurity by: 
Acxession/T esting 
i Pasttast Segust 
Additiongt 
By: Date: F-8- 2 Time: 209 am aD] 

Raasov. Pierasearst Pest ee a uswae 
2) By: . Date: THES nee AE PM 


wi 


a 
oe" 


Reason: 


. Date _. Time AM PM I 


Reason seein a 
4 By: 
; Sasson 


b6 
b7C 


Custodian wrest canpiate one af Gre fotlowlag: 
1} Eviiance disposed of as pathogenis wasis, authorized by: 
2} Evidence Forwarded 00. a eeemmmeendthoricad yr 


Oawier anly (please specify} 
33 Evidence tranyfarrad § 

Officar’s 
j Signatur 
4) Evidencelt 
zed by: 


fos 


i Recipient's name 4 
Signature: 
| 8a 


SURI 


Jay) 


| 


LSO8908Erc0Z8P00 -d 


[ 


FD-1936 (Rev. 10-16-2009) 
UNCLASSIFIED 
FEDERAL BUREAU OF INVESTIGATION 
Import Form 
Form Type: LABRPT Date: 10/02/2012 


Title: (U) Nuclear DNA Analysis 120330012 ADI AcJ 


b3 
Approved By: b6 

b7c 
Drafted By: IE 
Case ID #: (U) UNSUB; 


GIRL SCOUTS OF AMERICA THREAT 
LETTER-VICTIM; 
DT-OPERAT IONS 


Synopsis: (U) Nuclear DNA report 120330012 ADI AcJ 


Enclosure(s): Enclosed are the following items: 
1s (U) 1A materials, lab report 120330012 ADI ACJ 


+ 


UNCLASSIFIED 


UNCLASSIFIED 


Physical 1A/1C Cover Sheet for Serial Export 


Created From: 


Package: 
Stored Location: 
Summary: 


Acquired By: 
Acquired On: 
Attachment: 


b3 
b6é 
bie 
b75 


None 


(U) Chain of custody, 
communication and 
activity log, notes, 
instrument print outs, 
charts, graphs, ecs 
search slip, and data cd 


2012-10-02 


(U) 1A materials, lab 
report 120330012 ADI ACJ 


UNCLASSIFIED 


vg FBI Laboratory si 
REPORT OF EXAMINATION 


To: Jacksonville Date: September 26, 2012 
Squad 3. 


Lab No.: 120330012 ADI ACI 


Reference: Communication dated March 16, 2012 


Your No. 
Title GIRL SCOUTS OF AMERICA THREAT LETTER; VICTIM 
THREATEN OR ATTEMPT TO USE, POSSESS, 
TRANSPORTATION OF WMD 
Date specimens received: March 30, 2012 
The specimen listed below was examined in the Nuclear DNA Unit: 
Ql Envelope addressed ce ca Scouts (1B1, E4725339) cs 
This report contains the results of the nuclear DNA analyses. bI7E 
Results of Nuclear DNA Examinations: 
Specimen Q1 (swabbing of flap and corresponding area on envelope) was 


subjected to deoxyribonucleic acid (DNA) = by the ab chain reaction (PCR). The 


No amelogenin (for sex determination) typing results were obtained from 
specimen Q1, 


The STR typing result obtained for specimen Q1 is not suitable for 


matching purposes, however, may be utilized for exclusionary purposes." This result will be 
maintained by the FBI Laboratory for possible future comparisons. 


Page | of 3 


UNCLASSIFIED 


UNCLASSIFIED 


The DNA typing result obtained from the tested specimen is not eligible 
for entry into the Combined DNA Index System (CODIS). 


No other nuclear DNA examinations were conducted 


Methods/Limitations: 


The following methods and limitations apply to the results/conclusions provided in the results 
section(s) of this report and are referenced by number in the body of the text for clarity. 


Page 2 of 3 
120330012 ADI ACJ 


UNCLASSIFIED 


UNCLASSIFIED 


stqparks: 


The supporting records for the opinions and interpretations expressed in 
this report are retained in the FBI files. The submitted items will be retumed to you under 


For questions about the content of this report, please contact Forensic Examiner 
need For questions about the status of your submission, including 
a | examinations, please contact Request Coordinatof ht 


In addition to the evidence in the case, the Nuclear DNA Unit has 
generated secondary evidence that will also be returned to you. The secondary evidence can be 
found in a package marked NUCLEAR DNA UNIT SECONDARY EVIDENCE. It is 
recommended that this evidence be stored in a refrigerator or freezer and isolated from evidence 
that has not been examined. 


b6 


b7c 
bIE 


Nuclear DNA Unit 


ii. As used here, STR typing results are deemed not suitable for matching purposes (i.e., 
inconclusive) when the potential exists that not all of the genetic information in a biological 
sample has been detected. For STR typing results to be used for matching purposes, sufficient 
DNA quality and/or quantity is necessary. 


This report contains the opinions/interpretations of the examiner(s) who issued the report. 
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120330012 ADI ACJ 


UNCLASSIFIED 


ae) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: U rns and analysis of enclosed Date: 10/03/2012 
From: JACKSONVILLE 
JK-3 b3 
Contact: b6 
bIC 
Pee rear e sf - 
Dratted By: ——___] 


Case ID #: (U) UNSUB; 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERAT IONS 


ow (U)_To set lead for uploading and analysis of enclosed 


Full Investigation Initiated: 02/28/2012 


FD-1057 (Rev. 5-8-10} 


Details: 


On 9/13/2012 a Grand Jury Subpoena was issued 


b3 
bTE 


+ 


UNCLASSIFIED 


———rs 


FD-302 (Rey. 5-8-10) =1.-0f b= 


FEDERAL BUREAU OF INVESTIGATION 


Date of catry 10/17/2012 


On 08-15-12 writer requested a Grand Jury Subpoena for 


On 08-29-12 a Subpoena was issued 
b3 


b6 
b7c 
BITE 


tuvestigationon 09/13/2012. 4 Jacksonville, Florida, United States (Mail) 


b3 
b7E 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your ageney: it and its contents are not 
10 be distributed outside your agency. 


STATES District Co 


DISTRICT OF 


maa 


RR a 


pach 


b3 


ify before the Grand 


test States Ehetrict Quart 


it Hagas S$ 


vay ile, Florida 


0 being with vo 


in effect uni 


art Gy the court ar hy ast officer acting on 


b3 
b6 
b7C 


FD-302 (Rey. 5-8-10) 


Lo 


-l of 1- 


FEDERAL BUREAU OF INVESTIGATION 


Date of entry 10/12/2012 


b3 
(DOB) and (DOB), were b6 


interviewed at the Girl Scouts of America Corporate Headquarters, 1000 pyc 
Shearer Rd Jacksonville FL 32202. After being advised of the identity of bIE 
the interviewing Agent and the nature of the interview, ms[____]ana Ms 


[___]erovidea the following information: 


On 10-05-12, 


writer contacted Ms in_reference to 


provided a statement the day of the 
incident stating that she received a threatening call prior to the 


was not under investigation at the time of the incident and was 


ms.[__|was unable to provide any additional information related to the 
case, 


vs.L | was also unable to provide any additional information related to 
the case. Mr. [___]statea that she was aware of the call received by Ms. 

but did not drive a Ford escape like the caller mentioned. Ms. 
believes that_the unknown suspect found her name on the Girl Scouts 
website. Ms. also stated that she is unaware of anyone named CL] 
that works for the Georgia chapter of the Girl Scouts. 


Lnvestigationon 10/05/2012 y Jacksonville , Florida, United States (In Person) 


File # Datedratted 10/12/2012 


by 


This document contains neither recommendations nor conclusions of the FBI. Itis the property of the FBI and is loaned to your ageney: it and its contents are not 


10 be distributed outside your agency. 
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FD-1936 (Rev. 10-16-2009) 
UNCLASSIFIED 
FEDERAL BUREAU OF INVESTIGATION 
Import Form 
Form Type: LABRPT Date: 11/06/2012 


Title: (U) QDU Laboratory Report 


ee 
b7Cc 
Peet ret BY [ ey 
ae [ ees 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERAT IONS 


synopsis: (0) tabs 120330012 ev/[—*d 
Enclosure(s): Enclosed are the following items: 
1.  (U) Lab Rpt. vzoss00124 SS —*dateriat 


+ 


UNCLASSIFIED 


UNCLASSIFIED 
Physical 1A/1C Cover Sheet for Serial Export 


Created From: 


Package: 

Stored Location: None 

Summary: (U) Copy of images on 1 
cD, 
1 Coc, 


1 Comm log, 

6 Notes, 

1 Worksheet (1 page), 
1 EC (5 pages} 


Acquired By: = bs 


Acquired On: 2012-11-06 ee 
Acquired From: (U) bIE 


Attachment: U) Lab Rpt. 120330012/ 
1A 


Material 


7-1 Rev, 7-10-06) 
UNCLASSIFIED 
2501 Investigation Parkway 
Quantico, Virginia 22135 


* FBI Laboratory 


+7 
REPORT OF EXAMINATION 


To: Jacksonville Date: November I, 2012 
Squad 3 
bIc 
Lab No.: 120330012 ADI FN bIE 


Reference: Communication dated March 16, 2012 


Your No. 
GIRL SCOUTS OF AMERICA THREAT LETTER; VICTIM 
THREATEN OR ATTEMPT TO USE, POSSESS, 


Title: 
TRANSPORTATION OF WMD 


Date specimens received: March 30, 2012 
The following specimens were received in the Questioned Documents Unit on October 1, 2012 


Envelope addressed ‘{ __ oir Scouts (1B1, £4725339) 


Ql 
Stamp from Q1 envelope (1B1, E4725339) 


Ql. 


Q12 Stamp from Q1 envelope (1B1, E4725339) 


Q13 Stamp from Q1 envelope (1B1, E4725339) 
Tape from the back of Q1 envelope (1B1, E4725339) 


Qi4 
Page beginning] fou are..." (IBI, E4725339) 


Q2 
This report contains the results of the questioned document examinations. 


Page | of 3 
UNCLASSIFIED 


b6 
b7c 


UNCLASSIFIED 


Results of Examinations: 


The Q1 envelope flap was manufactured as a moisture-activated flap. The Q1.1-Q1.3 
postage stamps are self-adhesive stamps. The edges of the Q1.1-Q1.3 postage stamps and Q1.4 
pieces of tape are suitable for comparison with like materials. 


No indented writing or watermarks were observed during the examination of specimens 


QI and Q2 


Specimens Q1 and Q2 were searched through the Anonymous Letter File with negative 
results. Appropriate information has been added to this file for future reference purposes. 


The Q2 hand printing contains characteristics indicative of possible distortion, Distorted 
writing does not usually represent the normal writing characteristics of an individual; therefore, it 
is doubtful the Q2 hand printing will ever be identified to a particular individual through hand 
printing examinations 


The QI hand printing is suitable for comparison with a known standard(s). If future 
examinations are desired, dictated and undictated known writing should be obtained from any 
logical suspect(s). The known writing should be hand printed and comparable to the questioned 
writing in wording and format. Dictated known writing should be obtained on separate 
envelopes similar to the questioned specimen and each should be removed from the writer's view 
upon completion. Numerous repetitions may be necessary in order to obtain naturally prepared 
writing. Undictated known writing consists of writing prepared during normal course of 
business activity. Possible sources of undictated known writing include business papers, letters, 
canceled checks, and/or applications. 


Remarks: 


The supporting records for the opinions and interpretations expressed in this report are 
retained in the FBI files. Specimens Q1, Q1.1-Q1.4, and Q2 will be returned to your office at a 
later date under separate cover. 


QI1.1, Q1.2, and Q1.3 are self-adhesive items. Accordingly, these items are not being 
forwarded to the Nuclear DNA Unit for analysis. 


joys about the content of this report, please contact i ae 
bé 
L|« Ie 


bIE 
Page 2 of 3 


120330012 ADI FN 
UNCLASSIFIED 


UNCLASSIFIED 


For questions about the status of your submission, including any remaining forensic 
examinations, please contact Request Coordinator at re 
C 


bIE 


Boe ee 


Questioned Documents Unit 


This report contains the opinions/interpretations of the examiner(s) who issued the report 
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120330012 ADI FN 
UNCLASSIFIED 


| 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


eas 2 aa a as 


From: JACKSONVILLE 
JK-AO 
cna is 


Case ID #: (U) UNSUB; 
GIRL SCOUTS OF AMERICA THREAT 
LETTER-VICTIM; 
DT-OPERATIONS 


= (U)_ To — results of aaa and uploading off | 


Full Investigation Initiated: 02/28/2012 


FD-1057 (Rev. 5-8-10} 


OST 


Administrative Notes: (U) After completion of this upload, 
verified a sample of calls in the 


Details: 


The above referenced EC requested that Jacksonville prepare and upload 
uploaded 


uploaded on 11/07/2012 


++ 


UNCLASSIFIED 


be 
b7c 
bIE 


FD-1057 (Rev. 5-8-10} 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


Title: wf piscontinues Date: 12/04/2012 
a = — 3 


From: JACKSONVILLE 


JK-10 IA ree 
b7C 


GIRL SCOUTS OF AMERICA THREAT 
LETTER-VICTIM; 
DT-OPERAT IONS 


Synopsis: (U) To document discontinuation f | 
request. 


Full Investigation Initiated: 02/28/2012 


Details: 


The case agent advised that no additional information was developed to 
assist in narrowing the scope for the referenced 


ae | sos Co Jana case agent determined that no viable b6 


until such time that additional information is obtained. 


This communication serves to cover the pending lead. At which time the 
investigation develops additional information, the can be 
completed. 


++ 


UNCLASSIFIED 


——s 


FD-1936 (Rev. 10-16-2009) 
UNCLASSIFIED 
FEDERAL BUREAU OF INVESTIGATION 
Import Form 
Form Type: LABRPT Date: 05/08/2013 


Title: (U) Latent Print Report 


b3 
Approved By: bé 
b7C 


Drafted By: BYE 


oars ] tA aco 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERATIONS 


Synopsis: (U) LPOU Lab Report - Lab Number 120330012 ADI AER 


Enclosure(s): Enclosed are the following items: 
1. (U) Latent Case Supporting Records 


+ 


UNCLASSIFIED 


UNCLASSIFIED 
Physical 1A/1C Cover Sheet for Serial Export 


b3 

Created From: be 
b7c 

Package: bIE 

Stored Location: None 

Summary: (U) Latent Case 


Supporting Records 
Acquired By: 
Acquired On: 2013-05-01 
Attachment: (U) Latent Case 
Supporting Records 


7-1 (Rey. 7-10-06) 


UNCLASSIFIED 
: FBI Laboratory Tae glace 
REPORT OF EXAMINATION 
To: Jacksonville Date: May 1, 2013 


Squad 3 


b6 


Lab No.: 120330012 ADI AER 


bIE 

Reference: Communication dated March 16, 2012 
Your No. 
Title GIRL SCOUTS OF AMERICA THREAT LETTER, VICTIM 

THREATEN OR ATTEMPT TO USE, POSSESS, 

TRANSPORTATION OF WMD 
Date specimens received: March 30, 2012 
The specimens listed below were examined in the Latent Print Operations Unit: 
Q1 Envelope addressed 7 ee Scouts (1B1, E4725339) 
Ql. Stamp from Q1 envelope (1B1, E4725339) 
Q12 Stamp from Q1 envelope (1B1, E4725339) 
Q1.3 Stamp from Q1 envelope (1B1, E4725339) 
Q14 Tape from the back of Q1 envelope (1B1, E4725339) 
Q2 Page beginning] frou are..." (IB1, E4725339) oe 


This report documents the friction ridge print examinations. 
Results of Examinations: 


Twenty-one latent fingerprints of value were detected on Q1 and Q2. No latent prints 
of value were detected on the remaining specimens. 
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Automated fingerprint searches were conducted, but no identifications were effected 
Prints were added to the Unsolved Latent File (ULF), and you will be advised by a supplemental 
report if an identification is made. 


Methods: 


Items of evidence submitted to the Latent Print Operations Unit for examination may 
be examined visually, examined with various light sources, and/or processed with chemicals and 
powders to detect the presence of latent friction ridge prints. The specific sequence of 
examinations and processes depends upon the nature of the evidence 


Friction ridge print examinations are conducted using the Analysis, Comparison, 
Evaluation, and Verification methodology (ACE-V), which includes an assessment of the 
quantity and quality of the information present. The steps of ACE-V are applied to each 
examination as appropriate 


Analysis is the assessment of a friction ridge print to determine if sufficient reliable 
details are present to conduct a comparison with another print and to reach an identification 
conclusion. If these conditions are met, the print is determined to be of value. 


Comparison is the direct side-by-side observation of friction ridge prints of value to 
determine whether or not the information in two prints is in agreement. 


Evaluation is the formulation of a conclusion based on the information gathered 
during the analysis and comparison of the friction ridge prints 


Conclusions that can be reached are as follows: 


e Identification - the determination that there is sufficient quality and quantity 
of detail in agreement to conclude that two friction ridge prints originated 
from the same source. 


e Exclusion - the determination that there is sufficient quality and quantity of 
detail in disagreement to conclude that two friction ridge prints did not 
originate from the same source. 


¢ Inconclusive - the determination that corresponding areas of friction ridge 
prints are absent and/or unreliable and therefore cannot be identified or 


excluded. 


Verification is the independent application of the analysis, comparison, and 
evaluation phases of the ACE-V methodology to a friction ridge print by another examiner. 


Interpretations: 
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Due to the many factors involved in the deposition of a friction ridge print, neither the 
absence of a friction ridge print on evidence nor the exclusion of a friction ridge print with a 
given source disassociate that source from having touched the evidence. 


Remarks: 


For questions about the content of this report, please contact Physical 
Scientis/Forensie Examine ‘dat? bs 
bIe 
For questions about the status of your submission, including any remaining forensic Bie 
examinations, please contact Request Coordnaof a 


The specimens and photographs of the detected latent prints of value are being 


returned under separate cover. The supporting records for the opinions and interpretations 
expressed in this report are retained in the FBI files. 


ae 


Latent Print Operations Unit 


This report contains the opinions/interpretations of the examiner(s) who issued the report 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


FD-1036 (Rev. 10-16-2009) 


Form Type: LABRPT Date: 10/07/2013 
Title: (U) TEU hair/fiber report 
Approved By: b6 


Drafted By: 


anc fo] Die eau 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERATIONS 


Synopsis: (U) Lab# 120330012 ADI AAW 


Enclosure(s): Enclosed are the following items: 
1. (U) Case notes and admin pages for AAW 


+ 


UNCLASSIFIED 


UNCLASSIFIED 
Physical 1A/1C Cover Sheet for Serial Export 


Created From: b3 
b6 
b7C 

Package: bIE 

Stored Location: None 

Summary: (U) Case notes and admin 


pages for AAW 
Acquired By: 
Acquired On: 2013-10-07 


Attachment: (U) Case notes and admin 
pages for AAW 


UNCLASSIFIED 
2501 Investigation Parkway 


7-1 (Rev. 7-10-06) 
Quantico, Virginia 22135 


ic 


* FBI Laboratory 


REPORT OF EXAMINATION 


y 
Date: August 7, 2013 
Case ID No. b3 
b6 
b7C 
bIE 


To: Jacksonville 
Squad 3 
Lab No.: 120330012 ADI AAW 


Reference: Communication dated March 16, 2012 


Your No. 

Title: GIRL SCOUTS OF AMERICA THREAT LETTER, VICTIM 
THREATEN OR ATTEMPT TO USE, POSSESS, 
TRANSPORTATION OF WMD 


Date specimens received: March 30, 2012 
The following specimens were received in the Trace Evidence Unit (Hair and Fiber Group): 


Envelope addressed ec Scouts (1B1, 4725339) 


Ql 
Ql Stamp from Q1 envelope (1B1, E4725339) 
Q12 Stamp from Q1 envelope (1B1, E4725339) 
Q13 Stamp from Q1 envelope (1B1, E4725339) 
Tape from the back of Q1 envelope (1B1, E4725339) 


Q14 
Page beginning Lv are..." (IBI, E4725339) 


Q2 
This report contains the results of the trace evidence (hairs and fibers) examinations. 


Methods: 

Microscopic examination of hairs is accomplished by using stereomicroscopy and 
comparison microscopy. The presence or absence, appearance, arrangement and distribution of 
the characteristics within the cuticle, cortex and medulla of the hairs are examined and may be 


compared during a hair examination. 
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Microscopic examination of fibers is accomplished by using one or more analytical 
techniques including stereomicroscopy, comparison microscopy, polarized light microscopy, 
fluorescence microscopy, and instrumentally using microspectrophotometry and Fourier 
transform-infrared spectroscopy. The microscopic characteristics and optical properties 
determined by these techniques are used for the examination and comparison of fibers. 


Results of Examinations: 


Textile fibers of various types and colors were found underneath specimen Q1.1 and 
Q1.4. These fibers have been preserved for possible future comparison purposes. 


No fibers were found in or on specimens Q1, Q1.2, Q1.3, and Q2 


Nonhuman animal fur hairs not suitable for species characterization or meaningful 
microscopic comparison purposes were found underneath specimen Q1.4 


No hairs were found in or on specimens Q1 through Q1.3, and Q2. 


The specimens were examined visually using stereomicroscopy and comparison 
microscopy. 


Interpretation: 


The macroscopic and microscopic characteristics in hairs can be used to determine 
human or non-human origin, body area, racial characteristics, artificial treatment, damage, 
characteristics of decomposition and whether a hair has been forcibly removed or naturally shed. 
The characteristics exhibited in the hair(s) are used as the comparison criteria. When the 
presence or absence, appearance, arrangement, and distribution of macroscopic and microscopic 
characteristics exhibited in a recovered hair (s) are the same as in a potential source, the 
possibility that the compared hair(s) originated from the same source cannot be excluded. 
Consequently, the source of the known sample can be included as a possible source of the 
recovered hair(s), although the association of hairs using macroscopic and microscopic 
characteristics does not constitute a basis for personal identification. 


Fibers can differ as to type (e.g. rayon, cotton), color, shape, size, microscopic 
features (e.g. presence of delustering agents, voids) and optical properties (e.g. refractive index, 
sign of elongation). These are characteristics that may associate fibers with a group of items, but 
never to a single item to the exclusion of all others. However, even fibers with many similar 
properties may be excluded as originating from the same source by using the identified analytical 
methods. 


The characteristics present in fibers are used as comparison criteria. When all of the 
characteristics present in a recovered fiber are the same as in a potential source, the possibility 
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that the compared fibers originated from the same source cannot be excluded. Consequently, the 
recovered fibers are consistent with originating from the known source, or from another source 
comprised of fibers that exhibit the same microscopic characteristics and optical properties 


The inability to associate specimens through a microscopic hair/fiber examination 
does not preclude that the persons/items of interest had contact with each other. A number of 
factors can produce this result, including: 1) Hair/fiber evidence may not have transferred. 2) 
Hairs/fibers that did transfer may have been lost prior to submission to the laboratory. 3) The 
hairs/fibers transferred or the known comparison specimen submitted may not be representative 
of the source. 4) The hairs/fibers may be from a different source. 

Remarks: 


The supporting records for the opinions and interpretations expressed in this report 
are retained in the FBI files. 


For questions about the content of this report, please contact Physical 
Scientist/Forensic Examiner| at 


For questions about the status of your ission. i jng any remaining forensic 
examinations, please contact Request Coordinator : 


The submitted items will be returned at the completion of the requested examinations. 


Tace weet S| 


This report contains the opinions/interpretations of the examiner(s) who issued the report 
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FD-L087 (Rev. 5-8-10} 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Evidence Log 


Event Title: (U) Evidence Acquired Date: 06/06/2014 
approved By:[__ 


b3 

Peak ted- EY: | b6 

b7c 

EP eon - 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERATIONS 


Full Investigation Initiated: 02/28/2012 


Collected ef om 05/07/2014 


Collected From: (U) FBI Lab - Secondary Evidence 


Receipt Given?: No 


Holding Office: JACKSONVILLE 


Details: No Details Provided 

Item Type Description 

1B General (U) (4) Tubes Nuclear DNA - Secondary Evidence — 
Lab#120330012 


Collected On: 05/07/2014 


Special Handling Codes: Refrigerate 
bIC 


Other Locator: Secondary from LAB 


1B General (U) Swab - NE1 - Secondary Evidence - Lab Number 
120330012 ADI 
Collected On;_05/07/2014 
Located By: 
Other Locator: Secondary from LAB 


UNCLASSIFIED 


This document contains ncither recommendations nor conchusions of the FBI. It is the property of the FB! and is loaned to vour agency: it and its 
contents are not to be distributed outside your ageney. 


———ae 


UNCLASSIFIED 
Title: (U)_ Evidence Acquired 
b6 
b7C 
bIE 
1B General {U) Slides - TEU Secondary Evidence - Lab #120330012 


Collected On: 05/07/2014 
Located By: 
Other Locator: Secondary from LAB 


1B General (U) Photographs - LPOU Secondary Evidence - Lab# 
120330012 ADI AER 
Collected On: 05/07/2014 
Located By: 
Other Locator: Secondary from LAB 


+ 


UNCLASSIFIED 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


Form Type: OTHER Date: 09/23/2014 


Title: (U) Victim Notification Letters - Case update 


rvos mr sof] : 


b7c 


seecese ne earache 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERATIONS 


Synopsis: (U) To document victim notification letters (case updates) 
were sent. 


++ 


UNCLASSIFIED 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


September 23, 2014 


| 
Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


b3 
b6 


b7C 
RE: Case Numbe[ id b7E 


As a Victim Specialist with the FB] Jacksonville Division, 1 am contacting you to provide an interim case update 
regarding this investigative maiter. 


As you are aware, your name was previously referred to the FBI's Victim Assistance Program as a possible 
victim of a federal crime. We appreciate your assistance and cooperation while we are investigating this case. 
It can be a lengthy process and we request your continued patience while we conduct a thorough 
investigation. 


Although there are no substantive case updates at this time, we would like to continue to be responsive to any 
questions you may have regarding the federal criminal justice system and also to remind you that certain 
victim services are available to you should you need support or resources related to your victimization. Please 
feel free to contact me should you have further questions. 


Current information regarding the status of your case can be found on the Internet at 
https:/Awww.notify.usdoj.gov or by calling the Victim Notification System (VNS) Call Center at 1-866-DOUJ- 
4YOU (1-866-365-4968). You will n: to enter your Victim Identification Number (VIN land your 
Personal Identification Number (PI Byte you contact the Call Center and the first time you log into 
VNS on the Internet. If you are receiving notifications with multiple victim ID/PIN codes please contact the 
VNS Call Center. In addition, the first time you access the VNS Internet site, you will be prompte: nier 
your last name (or business name) as currently contained in VNS. The name you should enter a] 


You can also use the Call Center and the Internet to correct/update your contact information and/or change 
your decision regarding participation in the notification system. Your participation in this notification system is 
totally voluntary. You can choose not to participate or reactivate your access at any time. In order to continue 
to receive notifications, it is your responsibility to keep your contact information current. 


For many VNS regisirants email will provide the most timely notification. VNS does not currently have an email 
address for you. You can provide VNS an email address by accessing the VNS Internet Web page using the 
login information provided above. By entering your email as part of the VNS registration process future 
notifications will be delivered by email, except in rare circumstances when you might also receive a letter from 
VNS. 


If you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


b6 


Victim Specialist BIC 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


September 23, 2014 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


b3 
b6 


b7e 
RE: Case Numbe| | b7E 


As a Victim Specialist with the FBI Jacksonville Division, | am contacting you to provide an interim case update 
regarding this investigative matter. 


As you are aware, your name was previously referred to the FBI's Victim Assistance Program as a possible 
victim of a federal crime. We appreciate your assistance and cooperation while we are investigating this case. 
It can be a lengthy process and we request your continued patience while we conduct a thorough 
investigation. 


Although there are no substantive case updates at this time, we would like to continue to be responsive to any 
questions you may have regarding the federal criminal justice system and also to remind you that certain 
victim services are available to you should you need support or resources related to your victimization. Please 
feel free to contact me should you have further questions. 


Current information regarding the status of your case can be found on the Internet at 
https:/Awww.notify.usdoj.gov or by calling the Victim Notification System (VNS) Call Center at 1-866-DOJ- 
4YOU (1-866-365-4968). You will need to enter your Victim Identification Number WN be your 
Personal Identification Number (PINL____ anytime you contact the Call Center and the first time you log into 
VNS on the Internet. If you are receiving notifications with multiple victim ID/PIN codes please contact the 
VNS Call Center. In addition, the first time you access the VNS Internet site, you will be prompted to enter 
your last name (or business name) as currently coniained in VNS. The name you should enter i 


You can also use the Call Center and the Internet to correct/update your contact information and/or change 
your decision regarding participation in the notification system. Your participation in this notification system is 
totally voluntary. You can choose not to participate or reactivate your access at any time. In order to continue 
to receive notifications, it is your responsibility to keep your contact information current. 


For many VNS regisirants email will provide the most timely notification. VNS does not currently have an email 
address for you. You can provide VNS an email address by accessing the VNS Internet Web page using the 
login information provided above. By entering your email as part of the VNS registration process future 
notifications will be delivered by email, except in rare circumstances when you might also receive a letter from 
VNS. 


If you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


b6 


Victim Specialist Be: 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


September 23, 2014 


as 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


RE: Case Numbef | ee 
bé 
| | bie 


As a Victim Specialist with the FBI Jacksonville Division, 1 am contacting you to provide an interim case update 
regarding this investigative maiter. 


As you are aware, your name was previously referred to the FBI's Victim Assistance Program as a possible 
victim of a federal crime. We appreciate your assistance and cooperation while we are investigating this case. 
It can be a lengthy process and we request your continued patience while we conduct a thorough 
investigation. 


Although there are no substantive case updates at this time, we would like to continue to be responsive to any 
questions you may have regarding the federal criminal justice system and also to remind you that certain 
victim services are available to you should you need support or resources related to your victimization. Please 
feel free to contact me should you have further questions. 


Current information regarding the status of your case can be found on the Internet at 
https:/Awww.notify.usdoj.gov or by calling the Victim Notification System (VNS) Call Cer -866-DOJ- 
4YOU (1-866-365-4968). You will need _to enter your Victim Identification Number i and your 
Personal Identification Number (PIN[____kanytime you contact the Call Center and the first time you log into 
VNS on the Internet. If you are receiving notifications with multiple victim ID/PIN codes please contact the 
VNS Call Center. In addition, the first time you access the VNS Internet site, you will be prompted _to enter 
your last name (or business name) as currently contained in VNS. The name you should enter is} 


You can also use the Call Center and the Internet to correct/update your contact information and/or change 
your decision regarding participation in the notification system. Your participation in this notification system is 
totally voluntary. You can choose not to participate or reactivate your access at any time. In order to continue 
to receive notifications, it is your responsibility to keep your contact information current. 


For many VNS regisirants email will provide the most timely notification. VNS does not currently have an email 
address for you. You can provide VNS an email address by accessing the VNS Internet Web page using the 
login information provided above. By entering your email as part of the VNS registration process future 
notifications will be delivered by email, except in rare circumstances when you might also receive a letter from 
VNS. 


If you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


sa . 
b7¢c 


Victim Specialist 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


September 23, 2014 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


RE: Case numbef | 


You have been designated to receive notifications for Girl Scouts of America. 


As a Victim Specialist with the FB] Jacksonville Division, | am contacting you to provide an interim case update 
regarding this investigative matter. 


As you are aware, your name was previously referred to the FBI's Victim Assistance Program as a possible 
victim of a federal crime. We appreciate your assistance and cooperation while we are investigating this case. 
It can be a lengthy process and we request your continued patience while we conduct a thorough 
investigation. 


Although there are no substantive case updates at this time, we would like to continue to be responsive to any 
questions you may have regarding the federal criminal justice system and also to remind you that certain 
victim services are available to you should you need support or resources related to your victimization. Please 
feel free to contact me should you have further questions. 


Current information regarding the status of your case can be found on the Internet at 
htips:/Awww.notify.usdoj.gov or by calling the Victim Notification System (VNS) Call Center at 1-866-DOJ- 
4YOU (1-866-365-4968). You will ni ter your Victim Identification Number (VIN) hnd your 
Personal Identification Number PIM mine you contact the Call Center and the first time you log into 
VNS on the Internet. If you are receiving notifications with multiple victim ID/PIN codes please contact the 


VNS Call Center. In addition, the first time you access the VNS Internet site, you will be prompte: 
your last name (or business name) as currenily contained in VNS. The name you should enter i: 


You can also use the Call Center and the Internet to correct/update your contact information and/or change 
your decision regarding participation in the notification system. Your participation in this notification system is 
totally voluntary. You can choose not to participate or reactivate your access at any time. In order to continue 
to receive notifications, it is your responsibility to keep your contact information current. 


For many VNS regisiranis email will provide the most timely notification. VNS does not currently have an email 
address for you. You can provide VNS an email address by accessing the VNS Internet Web page using the 
login information provided above. By entering your email as part of the VNS registration process future 
notifications will be delivered by email, except in rare circumstances when you might also receive a letter from 
VNS. 


b3 
b6 
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If you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


b6 
— — b7c 
Victim Specialist 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


September 23, 2014 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


b3 
b6 
b7C 


RE: Case Number | b7E 


As a Victim Specialist with the FBI Jacksonville Division, 1 am contacting you to provide an interim case update 
regarding this investigative matter. 


As you are aware, your name was previously referred to the FBI's Victim Assistance Program as a possible 
victim of a federal crime. We appreciate your assistance and cooperation while we are investigating this case. 
It can be a lengthy process and we request your continued patience while we conduct a thorough 
investigation. 


Although there are no substantive case updates at this time, we would like to continue to be responsive to any 
questions you may have regarding the federal criminal justice system and also to remind you that certain 
victim services are available to you should you need support or resources related to your victimization. Please 
feel free to contact me should you have further questions. 


Current information regarding the status of your case can be found on the Internet at 
https:/Awww.notify.usdoj.gov or by calling the Victim Notification System (VNS) Call Center at 1-866-DOJ- 
4YOU (1-866-365-4968). You will need to enter your Victim Identification Number th a and your 
Personal Identification Number (PINT Janytime you contact the Call Center and the first time you log into 
VNS on the Internet. If you are receiving notifications with multiple victim ID/PIN codes please contact the 
VNS Call Center. In addition, the first time you access the VNS Internet site, you will be prompte nier 
your last name (or business name) as currently contained in VNS. The name you should enter 


You can also use the Call Center and the Internet to correct/update your contact information and/or change 
your decision regarding participation in the notification system. Your participation in this notification system is 
totally voluntary. You can choose not to participate or reactivate your access at any time. In order to continue 
to receive notifications, it is your responsibility to keep your contact information current. 


For many VNS regisirants email will provide the most timely notification. VNS does not currently have an email 
address for you. You can provide VNS an email address by accessing the VNS Internet Web page using the 
login information provided above. By entering your email as part of the VNS registration process future 
notifications will be delivered by email, except in rare circumstances when you might also receive a letter from 
VNS. 


If you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


b6 


Victim Specialist Bic 


[| 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


FD-1057 (Rev. 5-8-10} 


Title: (U) ORIG FD192 & COC FOR 1B1, 1B2, 183, Date: 10/16/2014 
1B4, & 1B5. 


From: JACKSONVILLE 
JK-SAS 2 


contacts [TT . 
b6 
b7C 

reproves ny: wens be 
Case ID {| (U) UNSUB; 


GIRL SCOUTS OF AMERICA THREAT 
LETTER-VICTIM; 
DT-OPERATIONS 


Synopsis: (U) Evidence items destroyed and 1B1 was 1A'd. 
Full Investigation Initiated: 02/28/2012 


Enclosure(s): Enclosed are the following items: 
1. (U) ORIG FD192 & COC FOR 1Bl, 1B2, 1B3, 1B4, & 1B5. 


2 (U) Evidence item 1B1- Letter and envelope with white powder (no 
Bio-Treat agents detected. FL Dept of Health Lab# 022812-001, 
2/28/2012.) 

Details: 


Evidence items destroyed and 1B1 was 1A'd. 


ORIG FD192 & COC FOR 1B1, 1B2, 1B3, 1B4, & 1B5. 


+ 


UNCLASSIFIED 


UNCLASSIFIED 
Physical 1A/1C Cover Sheet for Serial Export 


Created From: ie 
b7c 
Package: bIE 
Stored Location: None 
Summary: (U) ORIG FD192 & COC FOR 
1Bl, 1B2, 1B3, 1B4, & 
IBS: 
Acquired By: — 
Acquired On: 2014-10-15 
Acquired From: (uy) trol —~™d 
FBI 
Attachment: (U) ORIG FD192 & COC FOR 


1B1, 1B2, 1B3, 1B4, & 
1B5. 


UNCLASSIFIED 


Physical 1A/1C Cover Sheet for Serial Export 


Created From: 


Package: 
Stored Location: 
Summary: 


Acquired By: 
Acquired On: 
Acquired From: 


Attachment : 


None 


(U) Evidence item 1Bl1- 
Letter and envelope with 
white powder (no Bio- 
Treat agents detected. 
FL Dept of Health Lab# 
022812-001, 2/28/2012.) 


2014-10-15 
(U) TFO 
FBI 


(U) Evidence item 1Bl1- 
Letter and envelope with 
white powder (no Bio-— 
Treat agents detected. 
FL Dept of Health Lab# 
022812-001, 2/28/2012.) 


|| 


FD-1936 (Rev. 10-16-2009) 
UNCLASSIFIED 
FEDERAL BUREAU OF INVESTIGATION 
Import Form 
Form Type: OTHER Date: 01/23/2015 


Title: (U) Victim Notification Letter - Case closure 


b3 


b7C 


GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERATIONS 


Synopsis: (U) To document victim notification letters were sent —- Case 
closure. 


++ 


UNCLASSIFIED 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


January 23, 2015 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


b3 
b6 


b7C 
RE: Case Number b7E 


This letter is to provide you with an update about the case for which you were previously referred to the FBI's 
Victim Assistance Program. At this time, the FBI has closed its investigation in the above referenced case. The 
decision to close this case does not lessen the important contribution you made to the investigation. Your 
assistance and cooperation were greatly appreciated. 


It you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


Victim Specialist 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


January 23, 2015 


= aes . i 


Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


b6 

b7C 
beef__ fi 
This letter is to provide you with an update about the case for which you were previously referred to the FBI's 
Victim Assistance Program. At this time, the FBI has closed its investigation in the above referenced case. The 
decision to close this case does not lessen the important contribution you made to the investigation. Your 
assistance and cooperation were greatly appreciated. 


It you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


Victim Specialist 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


January 23, 2015 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


RE: Case Numbef | b3 
bé 
a Ss 


This letter is to provide you with an update about the case for which you were previously referred to the FBI's 
Victim Assistance Program. At this time, the FBI has closed its investigation in the above referenced case. The 
decision to close this case does not lessen the important contribution you made to the investigation. Your 
assistance and cooperation were greatly appreciated. 


If you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


= =< ist 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


January 23, 2015 


Girl Scouts of America 
Corporate Headquarters 
1000 Shearer Avenue 
Jacksonville, FL 32205 


: b3 
RE: Case Number{ b6 
b7c 
You have been designated to receive notifications for Girl Scouts of America. 
This letter is to provide you with an update about the case for which you were previously referred to the FBI's 
Victim Assistance Program. At this time, the FBI has closed its investigation in the above referenced case. The 
decision to close this case does not lessen the important contribution you made to the investigation. Your 


assistance and cooperation were greatly appreciated. 


If you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


oe = Ist 


U.S. Department of Justice 
Federal Bureau of Investigation 
FBI - Jacksonville 

6061 Gaie Parkway 
Jacksonville, FL 32256 

Phone: (904) 248-7410 

Fax: (904) 248-7137 


January 23, 2015 


. =| of America 


Corporate Headquarters 
1000 Shearer Avenue 


Jacksonville, FL 32205 -_ 


b6 
b7¢c 
bTE 


RE: Case Numberf | 


This letter is to provide you with an update about the case for which you were previously referred to the FBI's 
Victim Assistance Program. At this time, the FBI has closed its investigation in the above referenced case. The 
decision to close this case does not lessen the important contribution you made to the investigation. Your 
assistance and cooperation were greatly appreciated. 


If you have additional questions related to this matter, please contact me at (904) 248-7410. When you call, 
please provide the file number located at the top of this letter. 


Sincerely, 


Michelle S. Klimt 
Special Agent in Charge 


= = ist 


[ 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


FD-1057 (Rev. 5-8-10} 


Title: (U) ECU 1A: Lab#120330012 Date: 08/13/2015 


From: LABORATORY 
D7-ECU 


b6 
b7C 
Approved By: bIE 


GIRL SCOUTS OF AMERICA THREAT 
LETTER-VICTIM; 
DT-OPERATIONS 


Synopsis: (U) ECU 1A: Lab#120330012 
Full Investigation Initiated: 02/28/2012 


Enclosure(s): Enclosed are the following items: 
1. (U) ECU 1A: Lab#120330012 


Details: 


ECU did not create a Lab Report for this case. 


+4 


UNCLASSIFIED 


UNCLASSIFIED 
Physical 1A/1C Cover Sheet for Serial Export 


b3 
Created From: b6 
bic 
Package: BIE 
Stored Location: None 
Summary: (U) Lab#120330012 
Description of 
Enclosures: 17 Total 
pages Chain of Custody 
Communication and 
Activity Log Notes ECS 
Search Slip Shipping 
Invoice 
Acquired By: as | 
Acquired On: 2015-08-13 
Attachment : (U) ECU 1A: 


Lab#120330012 


| 


FD-1936 (Rev. 10-16-2009) 
UNCLASSIFIED 
FEDERAL BUREAU OF INVESTIGATION 
Import Form 
Form Type: EMAIL Date: 10/14/2015 


Title: (U) ULF Identification Notification 


fe b3 


b7c 


areas {| era else 
GIRL SCOUTS OF AMERICA THREAT 


LETTER-VICTIM; 
DT-OPERATIONS 


Synopsis: (U) Identification Notification 


++ 


UNCLASSIFIED 


The FBI Laboratory Latent Print Unit (LPU) routinely adds unidentified evidentiary prints that 
meet necessary criteria to the Unsolved Latent File (ULF) of the FBI’s automated fingerprint and 
palm print system. As known print records are added to the FBI’s database, they are searched 
against the unidentified latent prints within the ULF. When a potential ULF match is effected, 
the automated system generates a notification. As a result of these notifications, one or more 
unidentified latent prints detected on evidence under Case ID a a 
resulted in an identification 


ITEM 
DESCRIPTION 
(1B#/BARCODE) 


NAME OF UNIVERSAL CONTROL. 
INDIVIDUAL NUMBER/DATE OF 
IDENTIFIED BIRTH 


LABORATORY | LABORATORY 
# ITEM # 


Envelope. 
addressed t 
Girl Scouts 
(CIBI, E4725339) 


120330012 Ql 


This information is being provided as an investigative lead, and there may be additional 
unidentified latent prints in this case. For information on requesting additional examinations or 
obtaining a report concerning the specified case, please contact Forensic Examine | 


es the Latent Print Unit at{ 


Latent Print Operations Unit 


Limitations and Interpretations 

An identification is the determination that two friction ridge prints originated from the 
same source because there is sufficient quality and quantity of corresponding information. While 
an identification to the exclusion of all others is not supported by research, studies have shown 
that as more reliable features are found in agreement, it becomes less likely to find that same 
arrangement of features in a print from another source. 

While the examination process is subjective in nature, the Latent Print Operations Unit 
has quality assurance measures in place to minimize variability and reduce the chance of error. 
Examples include but are not limited to verification and blind verification, which are 
implemented in accordance with the Latent Print Operations Unit's standard operating 
procedures. 


Page | of 2 
UNCLASSIFIED 


b3 
b6 
b7C 
BIE 


There is no meaningful predictive rate of error for the entire comparison process, 
however, recent studies have demonstrated that examiners reach accurate and reliable 
conclusions under specific test conditions. 

The presence of a friction ridge print on an item of evidence indicates contact was made 
between the source and the item. The presence of a friction ridge print alone does not necessarily 
indicate the significance of the contact or the time frame during which the contact occurred. 


Page 2 of 2 


UNCLASSIFIED 


FD-1936 (Rev. 10-16-2009) 
UNCLASSIFIED 
FEDERAL BUREAU OF INVESTIGATION 
Import Form 
Form Type: EMAIL Date: 06/07/2017 


Title: (U) Unsolved Latent Match (ULM) in Lab #120330012 


b3 
Approved : 
—— 2 


b7C 


prafted sy:[ DIE 


GIRL SCOUTS OF AMERICA THREAT LETTER- 
VICTIM; 
DT-OPERATIONS 


Synopsis: (U) ULM Identification Notification 


+ 


UNCLASSIFIED 


Subject: Unsolved Latent Match in Case ee UNCLASSIFIED 3 


be 
b7¢c 


SentinelCaseld: [ b7E 
SentToSentinel: 6/7/2017 8:33:25 PM 


Classification: UNCLASSIFIED 


Sent for Approval for RECORD//Sentinel case[ 
ne 


The FBI Laboratory Latent Print Unit (LPU) routinely adds unidentified evidentiary prints that 
meet necessary criteria to the Unsolved Latent File (ULF) of the FBI’s automated fingerprint and 
palm print system. As known print records are added to the FBI’s database, they are searched 
against the unidentified latent prints within the ULF. When a potential ULF match is effected, 
the automated system generates a notification. As a result of these notifications, one or more 
unidentified latent prints detected on evidence under Case wl as resulted in an 
identification 


UNIVERSAL 
CONTROL 
NUMBER/DATE 


NAME OF 
INDIVIDUAL, 
IDENTIFIED 


LABORATORY | LABORATORY | ITEM DESCRIPTION 
(1B#/BARCODE) 


Page beginning L___] 
120330012 you are...” (IB1, 
E4725339) 


This information is being provided as an investigative lead, and there may be additional 
unidentified latent prints in this case. For information on requesting additional examinations or 


obtaining a report concerning the specified case, please contact Forensic Examinef_ | 
Cet Eo al or the Latent Print Unit aca please let us 
know if we can remove the remaining unidentified latent prints from the ULF. 


Latent Print Operations Unit 


b3 
bé 
b7Cc 
b7E 


Limitations and Interpretations 

An identification is the determination that two friction ridge prints originated from the 
same source because there is sufficient quality and quantity of corresponding information, While 
an identification to the exclusion of all others is not supported by research, studies have shown 
that as more reliable features are found in agreement, it becomes less likely to find that same 
arrangement of features in a print from another source. 

While the examination process is subjective in nature, the Latent Print Operations Unit 
has quality assurance measures in place to minimize variability and reduce the chance of error. 
Examples include but are not limited to verification and blind verification, which are 
implemented in accordance with the Latent Print Operations Unit's standard operating 
procedures. 

There is no meaningful predictive rate of error for the entire comparison process, 
however, recent studies have demonstrated that examiners reach accurate and reliable 
conclusions under specific test conditions. 

The presence of a friction ridge print on an item of evidence indicates contact was made 
between the source and the item. The presence of a friction ridge print alone does not necessarily 
indicate the significance of the contact or the time frame during which the contact occurred. 

This communication contains the opinions and interpretations of the examiner who issued 
the communication, and the supporting records are retained in the FBI files. 
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{ LR 2 [_ prem INTERVIEW NOTES f 
1 LR 3 1 CONSENT TO SEARCH DELL 330 OPTIPLEX i 
i { PROPERTY RECEIPT FOR DELL 330 OPTIPLEX - 1 
! LR 4 RIGINAL INTERVIEW NOTES AND TIMELINE ! 
: ! OF EVENTS L 
1! LR S 1 RSA HISTORY, ACH BATCH NAME AND BANK ACCOUNT INFO FOR ! 
! 1 
! LR 6 | OPTIPLEX 330 COMPUTER RETURNED i 
1 LR 7 [ort INTERVIEW NOTES i 
{ LR 8 {| SIXTEEN PAGE EMAIL PRINTOUT I 


1 LR i2 ! EMAILS PROVIDED py| __] ReLarine TO $7500 DEPOSITED INTO ] 
iS i HER BANK ACCOUNT 1 


FD-340c (4-11-03) 


File Number 


T 
Field Office Acquiring Evidence _f | Ye 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


Di Yes [No 
Federal Taxpayer Information (FTI) 


[1 Yes Co 


Title: 


Reference: 


ock b3 
BE 
a sot. * bIC 
Serial # of Originating Document DIE 
Date Recei 9 \ 
From 
Hinterviewee) 
(Address) 
te) 
By 
ToBeRetumed [1 Yes Ef No 
ReceiptGiven (1 Yes No 


{Communication Enclosing Material) 


of 
(ill Souls Derurds 


b6 
bic 


FD-340¢ (4-11-03) 


File Number 


Field Office Acquiring Evidence & 7 hy fee i= 


Serial # of Originating Document 


(9/ae/ ae 


Date Received 
+ 


From 
of Contributor/interviewee) 
{Address} 
) 
By 
ToBeRetumed [] Yes 0 No 
Receipt Given [] Yes O No 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


O Yes 1 No 
Federal Taxpayer Information (FTI) 

O Yes No 
Title: 
Reference: 


{Communication Enclosing Material) 


tes re interview of 


b3 
be 
bICc 
bIE 


b6 
bIC 


FD-340c (4-11-03) 


File Number Le oe a 


i 
Field Office Acquiring Evidence u Ye Roce 


Serial # of Originating Document 


Date Recei 0 \ 
b3 

From o bé 

of Contributor/interviewee) bIC 
DIE 
(Acidress) 
(City and State) 

By 

To Be Returned ae No 

Receipt Given Yes CJ No 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


Yes No 
Federal Taxpayer Information (FTI) 
O Yes the 
Title: 
Reference: 


{Communication Enclosing Material) 


Description: (1  Oniginal notes re interview of 


Consinr ke Sete Dall 3% of by exe 
Roper dy Recipe for Yol\ 236 optiplor 


FD-941 (2-26-01) i 


CONSENT TO SEARCH COMPUTER(S) 


I , have been asked by Special Agents of the 


Federal Bureau of Investigation (FBI) to permit a complete search by the FBI or its designees of any and all computers, 


any electronic and/or optical data storage and/or retrieval system or medium, and any related computer peripherals, 


described below: 


Dell Ootisley 330, s/v 


CPU Make, Model & Serial Number (if available) 


; 
{ KEEP : { 

Storage or Retrieval Media, Computer Peripherals ATTACHED TO EXHIBIT LR# | 
! b3 
L Se Seer = {pre 
“4 bVE 


and located at GIS WA, 44 hy 3?, Miuvre flock AR _JAIM » which I own, possess, 


control, and/or have access to, for any evidence of a crime 


ote and/or specific directionsfor computer entry.are as follow} 


have been advised of my right to refuse to consent to this search, and I give permission for this search, freely 


and voluntarily, and not as the result of threats or promises of any kind. 


I authorize those Agents to take any evidence discovered dari; infon which 


it is stored, and any associated data, hardware, software and computer 


tJ We 


Date 
. bé 
lola4/ bh b7C 
Date 


Printed Full Name of Witness 


GIT. 6}, Mlivine fuck DR Ty 


Location 


FD-597 (Rev 8-11-94} Page t of | 


UNITED STATES DEPARTMENT OF JUSTICE 
_ FEDERAL BUREAU OF INVESTIGATION 


Received/Returned/Released/Seized b3 
File # _BTE 


On (date) | 19) [ze] i } item(s} listed below were: 
iy iy - eceived Fron 

: Returned To 

Released To 

Seized 


(Name) Gy! _ Scots, dD, ‘anond ¢ ot Freleen Sas Oklahoma acl Texas 
(Street Address) © 15 lag 29th st 
cy) Voth Lyttle _K. ock, Ae A2AIG 


Description of Item(s): i 


C1\ Dell Oowolex 230, </v | 
J rot oj | 


bé 
b7c 


Received By: Received Fro. 


FD-340¢ (4-11-03) 


File Number 5 ne cee 


Field Office Acquiring Evidence Cif Ae ch 


Serial # of Originating Document 


{Address} 
id State) 
By 
ToBeRetumed [1 Yes No 
ReceiptGiven [1 Yes TiNo 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procetlure 


[] Yes No 


Federal Taxpayer Information (FTD 

O Yes oO xo 
Title: 
Reference: 


(Communication Enclosing Material) 


interview of 


and  Tiathhe of evtaty 


b3 
be 
bICc 
bIE 


b6 
bIC 


10-18-2014 1:07:52 pm Someone accessed the Girl Scouts-Diamonds checking account online and 12 
online transfers of $7500.00 each were made to numerous banks under numerous names, for a total of 
$90,000. At the same time thousands of emails in an &quot; email bomb &quot; attack. The email 
bomb was meant as a decoy. The IT guy found trojans or keystoke monitors, which he deleted. 


10-18-2011 notified| __—iof email spam flooding computer after GSUSA webinar on computing be 
BIC } 


operating reserves. At end of work day several thousand emails had arrived and it was a constant 
stream on my computer. 


10-19-2011] about 11am checked ACH bank website and noticed unusual transaction in soft ACH posting 
of $90,000; catled bank at ebanker department and spoke | She said that if | did not post 
the transaction then | had been “hacked”. She wanted to make some calls and call me back. 


10-19-2011 called and left messages fo _and | ee Centennial Bank, 


12:17pm contacted] | 
12:30 contacted First National Bank in Ft Smith and spoke qi 


a3q____—_falled to say that she has contacted all banks involved and shut down the ACH site 
until she hears from I.T. that the firewall is operational.[ says that our firewall should have stopped 
this. 


nar catle{ 


2:00pm spoke t{_ sind was told that she had increased overdraft to $25,000 per bE 
discussions wit] local bank president pie 


3:00pm called First National at Fort Smith and left messages fof and others 


3:00pm called LR FBI office and spoke to receptionist. She recommended posting on Internet Complaint 
Website at www.ic3.gov whic iid. 


5:28pm addef fame and contact information to complaint since my email had been shutdown. 


)-20-2011. 
8:30am called [et Morgan Stanley to see about transfer from broker. Takes 4 business days. 


8:40 returned call tol First National Ft Smith and left message 


8:45 calle nd was told that she would be in after 10am so called and left message 
for Iso. 


9:00 called] iat. GSUSA 4 U and she made 2 suggestions to call our auditors and call the local b6 
b7C 


association of fraud examiners 


9:10 called pn_————_—-auitors and left messages 


KEEP ATTACHED TO EXHIBIT LR# ' 
b3 
BIE 


10-20-2011, 9:39 calle] treasurer of Assoc of Certified Fraud Examiners 


9:45 called FBI Hotline and left voice mail message per|___kuggestion we 


bIC 
9:52 called Rt Arkansas Forensic! 
10:0 __ essistant cf eaties me back and said tha{ would call tomorrow. 
10:15 spoke t{ phot using tokens for wire transfers with ID protection provided by 


Verisign 


10:30 spoke t 


10:44 call from @ Centennial Bank wit! Ir cfs 


Received promises for approximately $30,000 in ACH reversals to return to account on Monday morning 


3p SUSA called again to check on us. She recommended their IT resources including 
ani bé 
b7e 


1C3 Complaint Information ‘ 


Complaint Information 
Internet Crime Complaint Center 


Update Complaint || view Complaint ||" Download PDF 


Page 1 of 4 


Logout 


r Your Personal Information 
* First Name: 


Middle Name: 
* Last Name: 
Business Name: Girl Scouts-Diamonds of AR, OK and TX 
* Age: 
* Gender: 
* Address: 615 W. 29th St. 
Address (continued): 
Suite/Apt./Mail Stop: 
* City: North Little Rock 
Do you live within the city limits?: © Yes © No 
County: Pulaski 
State: Arkansas 
* Country: United States 
* Zip Code / Route: 72114 


* Phone Number: 
* E-mail Address: 
Name of your focal police or sheriff's office: 


North Little Rock PD 


Is the complaint you are filing related to the Internet or an online service? 
© Yes © No 


Do you have pertinent documents in paper form? 
® Yes C1 No 


[ Information about PHS aRRANAUSI/ Business that victimized you 
First Name: 


Middle Name: 

Last Name: 
Gender: U 

Address: 


BIE 


bE 
b7C 


i 
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Address (continued): 
Suite/Apt./Mail Stop: 
City: 

State: 

Country: 

Zip Code / Route: 
Phone Number: 
E-mail Address: 


[ Other Identifiers 
Web Site: 


IP Address: 

IRC Server: 

Chat Room Name: 
Usenet Newsgroup: 
Other: 


r Monetary Loss 


* Please specify the total dollar amount of your loss from this incident: 
$ 90000 (US Dollars) 


Please indicate the means of payment (select all that apply) 
[2 Cash 

FP Cashier's Check 

PF Check/Debit Card 

F Credit Card 

E Money Order 

M Wire Transfer 

E Other (Specify Other) 


Did you use a third party online payment service such as PayPal, BidPay, Escrow? 
Yes © No 


[ Deawtpibenof tue Invidestds how you have been victimized. ——_______—_-—_} 
Be specific. Include date(s) of transaction(s), a description of any items that were not 
delivered or were counterfeited, any transaction numbers (from Ebay, Western Union, 

PayPal, etc.), and any other pertinent information that helps to explain how you were 
victimized. Also if you received anything by U.S. Mail, FedEx, or UPS, specifically describe 

the envelope, by the date, time, city and zip code shown on the stamp cancellation 

postmark, 


T was notified at approximately 11:30am on 10/19/11 that on the previous day, 10/18/11, 
at 1:07pm, someone had accessed the Girl Scouts-Diamonds checking account online and 


10/25/2011 ia 
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12 online transfers of $7500.00 each were made to numerous banks under numerous 
names, for a total of $90,000. At the same time, I began receiving thousands of emails in 
an &quot;email bomb&quot; attack. I believe the email bomb was meant as a decoy. Our IT 
person was able to find some files on my computer that he said were 'trojans' or 'keystroke 
monitors', which he deleted. The computer has since been shut down and removed from the 
network. I was able to contact Centennial Bank about the transactions, and they advised me 
to contact the FBI right away. 


Please indicate any medium used by the individual/business in the course of the incident. 
F Bulletin board 

[2 Chat room 

TE Email 

I Fax 

[In person 

F Internet messaging 
PF Mail 

E Newsgroup 

IE Telephone 

E Web site 

C wire 

M4 Other 


Please indicate the initial means of contact with the individual/business that victimized you. 
[ no response provided ] 


Was this initial means of contact unsolicited/uninvited? 
@ Yes ONo 


What was your relationship with the individua!l/business you are complaining about prior to 
the incident you are reporting? 
no prior relationship 


Did you conduct any research on the individual/business prior to the incident? 
CYes @ No 


How much time has passed since you determined you were victimized? 
Less than 1 week 


r ‘act Informati: 
Rang sre nigumadion other victims to this crime? 


None--online transaction 


Have you reported this crime to any law enforcement or government agencies? 
T Better Business Bureau 
[E Consumer protection agency 


10/25/2011 
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I Individual/business that victimized you 
E Police/other law enforcement 
IF Private attorney 


Provide the specific name of each organization, contact name, contact phone number, email 
address, date reported, and report number (if known). 
{ no response provided ] 


[ Supplemental Information 
wanna enna Date:10/19/2011 17:28:01 ~------------------— 


The aes in = of Internet maintenance at our office is [_ ers his email is 


£4 


10/25/2011 
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ACH History 


Edit ACH Batch 


ACH 
Batch Templates Based on Template : Batch Type : To/From Personal Company : Girl Scouts 
fatch Manager girlscout Accounts (PPD) of AOT 
Rotials Shai Batch Name : girlscout Description : Sanaa : 
. Offset A it: Girl Total Debit 
j set Account : Gir ass otal Debits : 
Administration | _— Scouts of AOT Total Credits : $90,000.00 $90,000.00 
M Status User Name Date / Time 
pce Created 0/18/2011 1:07:52 PM 
alp a 07: 
Site Map 18" Approval 0/18/2011 1:07:52 PM 
Options 3 Released 0/18/2011 1:07:52 PM 
Sign Off | The entries in this batch will be offset with an entry to the “Girl Scouts of AOT" 
F account. 
Search | Search 
Criterion : Value : 
2 alata aia ah ce tiple a aca ral a oe pan meee ye a b6 
b7e 
7 2, Name ID Deposit Withdrawal Account Routing # Type Pre 
5 vou $7,500.00 
$7,500.00 
$7,500.00 
pot $7,500.00 
$7,500.00 
Giri 
Scouts of $90,000.01 


A 
$7,500.00 
$7,500.00 


0/19/2011 


———— 


~ Edit ACH Batch Page 2 of 2 
eos Ta $7,500.00 

$7,500.00 

$7,500.00 

$7,500.00 

$7,500.00 
bé 
b7C 


ey | aera 


FD-340c (4-11-03) 


File Number ee 


Field Office Acquiring Evidence Ga Fhe Re cle 


Serial # of Originating Document 


Date Received +f im 
From 
ANTS OFCOM interviewee) 
(Address) 
(City and State) 


sy _S }} $$ $$ 


ToBeRetumed [] Yes Ef No 


Receipt Given 


(1 Yes No 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e} 
Federal Rules of Criminal Proceflure 


Title: 


Reference: 


C1 Yes No 


Federal Taxpayer Information (FTI) 
O Yes No 


Description: 


Roa 


(Communication Enclosing Materia) 


Original notes re interview of 


ny wwh 


Ble 


feral ware aad Beak «cccns} MAA 


b7c 


ACH Processed Report Page 1 of 2 


Online Banking Administration - ACH Reports 
View Processed ACH Items 


Business Sent Date Range Detail to Show 
[Girt Scouts of AOT (girlscout) =] [October wife _<f[2ot =] © summary 
ic) @ detail 


October +f} 18 ~}]2011 ~ 
Update 


[rorter2014 
File B~ TRANSIT 


Company Name Batch Name | Effective Date} Batch Type | #of Transactions | Contro! Total} Debit Total Credit Total 


Name (D Account # Routing # Withdrawal Deposit 


Girl Scouts of AOT girlscout 10/19/2011 PPD 13 13 $90,000.00/ $90,000.00 
7,800.00 
7,500.00 
7,500.00 
7,800.00 
7,600.00 


‘Gif Scouts of A 29,039.00 


7,500.00 
7,500.00 
7,800.00 
7,806.00 
7,500.00 
7,500.00 
7,600.00 


$90,000.00) $90,000.00 


File Tota! for file B - TRANSIT 13 13 


ja | 


HAROLM 


| 


Field Office Acquiring Evidence 


Serial # of Originating Document 


Date Received { / i 


From 
ibutor/Interviewee) 
(Address) 
te) 
By 
To Be Returned [ Yes aN 
Receipt Given [1 Yes No 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


Yes No 


Federal Taxpayer Information (FTI) 


[1 Yes No 
Title: 
Reference: 
{Communication Enclosing Material) 
Description: [3 Original notes re interview of 


erocned Opt ple > 420. Co pa puhir 


b3 
b6 
b7c 
BIE 
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UNITED STATES DEPARTMENT OF JUSTICE 
FEDERAL BUREAU OF INVESTIGATION 


< r Property Received/Returned/Released/Seized. 
File # . 


On (date) { Ih /% {\ ; i item(s) listed below were: 


Received From 


fReturned To 


N, Released To 
£] Seized 


(Name) (it | Scouls Dic pyords at Ack keaSes Ok lob tad fexsy 
(Street Address) (ks Ww a4 a SHets F 
cin _Weh, Lite Fock, AB 7ally 


Description of Item(s): ——— — . . 
: yom Tul | 
<All yeti p e130, 52 —_*, 


jo 


KEEP ATTACHED TO'EXHIBIT LR# 


Received Received From: 


FD-340 (Rev. 4-11-03) 


File Number 


Field Office Acquiring Evidence Les PIES 


Serial # of Originating Document 


Date Received 


By he 


To Be Returned Yes Be 
Receipt Given Yes lo 
Grand Jury Material - Disseminate Only Purstfant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


[i Yes No 
Federal Taxpayer Information (FTI) 
Yes i] No 


Title: Une bd), 
Giel Scouts _Drumonds — Vie bribe 
Comyutec_ntrusin 


Reference: 


Description: Original notes re interview of 


be 
bic 


FD-340 (Rev. 4-11-03) 


File Number 


Field Office Acquiring Evidence se aae.les 


Serial # of Originating Document 


Date Received Bri fia 


b3 
ero | aerate | i pe 
rviewee) 


bIC 
ape bIE 
6 I 
‘(City and State) 
By A 
To Be Retume es No 
Receipt Given Yes [No 
Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 
Yes LE No 
Federal Taxpayer Information (FTI) 
Yes (AL No 
Title: x 
ile: tingu by “ 
Grr) Scouts~ Diamonds - Vic Pim) 
Co ug ion 
b6 
Referenc pyc 
Description: Original notes re interview of 


sixteen (1é) (f2ge omait pola tout 


FD-340 (Rev. 4-11-0; b3 
File Number 


Field Office Acquiring Evidence __ 71M 


Serial# of Originating Document 


SLIA 


Date Received 


By 
ToBeReturned [] Yes EJ No 
Receipt Given (1) Yes ee No 
Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 
O Yes J No 
Federal Taxpayer Information (FTI) 
O Yes LNo 
ize 4 


Reference: 


(Communication Enclosing Material) 


Description: fra) Original notes re interview of 


Emu l ¢ Bets heatleS 


1 


Record Request 
FD-125 (Rev. 4-1-93) 


Date 02/22/2012 


[J Birth [[] Credit [¥] Criminal [Death [7] INS 


([] Marriage* [7] Motor Vehicle 


To 
NCIC 


Buded 
02/22/2012 


Name and aliases of subject, applicant, or employee, and spouse 


(1 other 


File Number 


Address 
Residence 


Business 


Former 


* Date and place of marriage 


(if applicable) 


Race Sex Age Height Weight Hair 


M1] Female 
[1 Male 


= date Birthplace 


Arrest Number 


Social Security Number 


[| 


Fingerprint classification 


Criminal specialty 


Eyes 


Drivers License Number 


D/L Photo [] other 


Specific information desired 


f 
esuls of che FCI cee! — 
Results of check FOI sofa 


ssTmis. 


FD-340 (Rev. 4-F1-03 ba 


File Number pre 


b7 
Field Office Acquiring Evidence Ven. Of Rca’ ® 


Serial # of Originating Document 


Date Received 3 A ai XK 


From 


(Name of Contributor/nterviewee) 


(Address) 


ToBeRetumed [7 Yes oe 
ReceiptGiven [J] Yes No 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


O Yes 
Federal Taxpayer Information (FTI) 


fo 
O Yes ro 


Reference: 


(Communication Enclosing Material) 


iption: © __ Original notes re interview of 


karl Cells sen dent 4 


FD-340 (Rev, 4-1 1-03) 


Field Office Acquiring Evidence DALLAS 


Serial # of Originating Document it 


Date Received __ Ape 4, 1@42% 


b3 
From b6 
pviewee) BIC 7 
bIE 
‘City and State) 
To Be Retumed [] Yes RD No 
Receipt Given [1 Yes § No 
Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 
[] Yes xb No 
Federal Taxpayer Information (FTI) 
Yes & No 
Title: ¢ 
UNSvBi 
GIALROVT -DINWOns CUTETLMY, 
COMPSAR. LITRES Zap) 
Reference: Alec) Ls BL b6 | 
(Communication Enclosing Material) BIC 


Description: ft Original notes re interview of [p= 41 
[| otaectarn wWasmay 4 To Detane Lice sis 


FD-340 (Rev. 4-11-03) 


File Number 


Field Office Acquiring Evidence 


Serial # of Originating Document ) | 


Date Received 


From 


ToBeRetumed [] Yes ay 
Receipt Given {1 Yes No 
Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 
(Yes No 
Federal Taxpayer Information (FTI) 
Yes No 
Title: An su h % 
—_ - sn 7 ~~ Be 3 ° 
CLR SCouTS~ DTAMOW DS (ICT mn) 4 


COMPUTER CATR USTON/ 


Reference; 


(Conmunication Enclosing Material} 


Description: (1 __ Originat notes re interview 


=> Emarls prow sed AY 


to #7900 Avpos tek ivr her honk acwost 


LA Envelope 


Case ID: 91A-LR-46070 


! MO 11 1 EMAILS PROVIDED ay| | RELATING TO $7500 DEPOSITED INTO ybs 
t 1 HER BANK ACCOUNT iy 
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File Number Ue epee es ec 


Field Office Acquiring Evidence Cth Ree iS 


Serial # of Originating Document 


Date Received ml ul l i 


From 
ime of Conmibutor/Interviewee) 
(Address) 

b3 
b6 

By b7C 
bIE 

To Be Retumed (1 Yes No 

ReceiptGiven [1 Yes No 


Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 


O Yes EI No 
Federal Taxpayer Information (FTD. 
A Yes Cixe 
Title: 
Reference: 
(Communication Enclosing Material) 
Beseription: Original notes re interview of 


Western Union fee’ t 
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UNITED STATES DISTRICT COURT 
for the 


Bastern District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 


b3 
To: : b6 


b7c 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 


below to testify before the court’s grand jury. When you arrive, you must remain at the court until the judge or a court 
officer allows you to leave. 


Place: United States Attorney's Office : Date and Time: 
Richard Shepard Amold U.S. Courthouse 


600W: Capitol] 
Little Rock, AR 72201 


: James W. McCormack 
ates CLERK OF COURT. 


C Siggflture of Clerk or Deputy Clerk 


‘The name, address, e-mail, and telephone number of the United States attorney, or assistant United States attomey, who 
requests this subpoena, are: 


AUS, 
425 W. Capitol, Suite 500 
Little Rock, AR_7220 
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this communication. 
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UNITED STATES DISTRICT COURT 
for the 


Eastern District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 


b3 
b6 
b7¢c 


To: 


YOU ARE COMMANDED io appear in this United States district court at the time, date, and place shown 
below to testify before the court’s grand jury. When you arrive, you must remain at the court until the judge or a court 
officer allows yout to leave. 


Place: United States Attorney's Office Date and Time: 


Richard Shepard Amoid U.S. Courthouse 
Little Rock, AR 


[ James W. McCormack os 
Date: 1 CLERK OF COURT be 


b7c 


CY Siggfeure of Clerk or Deputy Clerk 


The name, address, e-mail, and telephone number of the United States attorney, or assistant United States attomey, who 
requests this subpoena, are: 

AUS; 

425 W. Capital, Suite 500 
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attached hereto and made part of this communication. 
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To: 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 
below to testify before the court’s grand jury. When you arrive, you must remain at the court until the judge or a court 


officer allows you to leave. 


UNITED STATES DISTRICT COURT 
for the 


Eastern District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 


Place; United States Attorney's Office Date and Time: 
Richard Sheperp Amnold US. Courthouse 
600 W: Capitol, 


Little Rock, AR 72201 
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The name, address, e-mail, and telephone number of the United States attorney, or assistant United States attomey, who 
requests this subpoena, are: 


AUS, 
425 W. Capitol, Suite 500 
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copy of the subpoena is attached hereto and made part of this 
communication. 
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UNITED STATES DISTRICT COURT 


for the 


Eastern District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 


To: 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 
below to testify before the court’s grand jury. When you arrive, you must remain at the court until the judge or a court 


officer allows you to leave. 


Place: United States Attorney's Office 
Richard Shepard Amold U.S. Courthouse 
600 W: Capitol, 
Little Rock, AR 72201 


Date and Time: 


Ld 


James W. McCormack 
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The name, address, e-mail, and telephone number of the United States attomey, or assistant United States attorney, who 


requests this subpoena, are: 
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425 W. Capitol, Suite 500 
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A copy of the subpoena is attached hereto b3 
and made part of this communication. 
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UNITED STATES DISTRICT COURT 
for the 


Eastern District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 


To: 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 
below to testify before the court’s grand jury. When you arrive, you must remain at the court until the judge or a court 
officer allows you to leave. 


Place: United States Attorney's Office Date and Time: 


Richard Shepar: .S, Courthouse 


Little Rock, AR 72201 


Date: LERK OF COURT 


Cc : 
tured Clerk or Deputy Clerk 
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A copy of the subpoena 
is attached hereto and made part of this communication. 
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UNITED STATES DISTRICT COURT 
for the 


Eastern District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 


To: 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 
below to testify before the court’s grand jury. When you arrive, you must remain at the court until the judge or a court 


officer allows you to leave. 


b3 


Place; United States Attorney's Office 
Richard Shepard Arnold U.S. Courthouse 
600 W, Capitol, 
Little Rock, AR 72201 


Date and Time: 


[| 


James W, McCormack b3 


The name, address, e-mail, and telephone number of the United States attorney, or assistant United States attorney, who 


requests this subpoena, are:. 
aus __| 
425 W. Capitol, Suite 500 


Little Rock, AR_72: 
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UNITED STATES DISTRICT COURT 
for the 


Eastem District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 


b3 
be 


To: ied 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 
below to testify before the court’s grand jury. When you arrive, you must remain at the court until the judge or a court 
officer allows you to leave, 


Place; United States Attorney's Office Date and Time: 
Richard Shepard Arnold U.S. Courthouse 


Little Rock, AR 72201 


b3 
: James W. McCormack bé 
Date: CLERK OF COURT bic 
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C Sigflature of Clerk or Deputy Clerk 


The name, address, e-mail, and telephone number of the United States attomey, or assistant United States attomey, who 


425 W_Capttol, Suite 500 
Littl 


requests this subpoena, are: 
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On February 1, .2012, 
provided response to a Grand Jury Subpoena 
issued by the Eastern District of Arkansas. The response to the 
Subpoena is attached hereto. 
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UNITED STATES DISTRICT COURT 
for the 


Eastern District of Arkansas 


SUBPOENA TO TESTIFY, BEFORE 4 GRAND JURY 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 


below to testify before the court’s grand jury. When you arrive, you must remain at the court until the Judge or 2 court 
officer allows you to leave. 


Place: United States Attcrney's Office Dat Time: 
S°°! ichard Shepard Amold U.S. Courthouse ate and Tint 


600 W.Capitol[ 
Little Rock, AR 72207 


: James W. McCormack 
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On February 1, 2012[ | provided 
response to a Grand Jury Subpoena issued by the Eastern District of 
Arkansas. The response to the Subpoena is attached hereto. 
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UNITED STATES DISTRICT COURT 
for the 


Bastern District of Askensas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 
b3 
Tot bé 
‘ b7C 


xe appear in this United States district court at the time, date, and placs shown 
below to testify before the court’s grand jury. When you avrive, you must remain at the court until ths fudge or a court 
officer allows you to leave, 


Place; United States Attorney's Office Date and Time: 


Richard Shep: 8. Courthouse 
600 W. Cen Ld 


Little Rock, AR 722% 
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The name, address, e-mail, and telephone number of the United States atiomey, or assistant United States attorey, who 
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to a Grand Jury Subpoena issued by the Eastern District of 
Arkansas. The response to the Subpoena is attached hereto. 
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Grand Jury Subpoena issued by the Eastern District of Arkansas. 
The response to the Subpoena is attached hereto. 
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issued by the Eastern District of Arkansas. The response to the 
Subpoena is attached hereto. 
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| on April 18, 2012,[___ 


provided response to a Grand Jury Subpoena issued by the 
Eastern District of Arkansas. The response to the Subpoena is 
- attached hereto. 
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UNITED STATES DISTRICT COURT 
for the 


Eastern District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 
b3 


To: 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 
below to testify before the court’s grand jury. When you arrive, you must yemain at the court until the judge or a court 


officer allows you to leave. 


Place; United States Attorney's Office Date and Time: 
Richard Shepard Arnold U.S. Courthouse [| 


600 W. Capitol, 
* Little Rock, AR 72201 
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The name, address, e-mail, and telephone number of the United States attomey, or assistant United States attomey, who 
requests this subpoena, are: 


Date: 


AUS, 
425 W. Capitol, Suite 500 
Little Rock, AR_7220 
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UNITED STATES DISTRICT COURT 
for the 


Eastern District of Arkansas 


SUBPOENA TO TESTIFY BEFORE A GRAND JURY 


YOU ARE COMMANDED to appear in this United States district court at the time, date, and place shown 
below to testify before the court’s grand jury. When you arrive, you must remain at the court until the judge or a court 


officer allows you to leave. : 


Place; United States Attorney's Office Date and Time: 
Richard Shepard Arnold U.S. Courthouse 
600 W. Capitol, 
Little Rock, AR 72201 
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The name, address, e-mail, and telephone number of the United States attorney, or assistant United States attorney, who 
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Case ID #: (U) GIRL SCOUTS DIAMONDS — COMPUTER 
INTRUSION 
(U) GRAND JURY 


Synopsis: (U) To request case be closed on the above captioned matter 
Full Investigation Initiated: 11/02/2011 


Details: 


i. — = --1/Se Girl Scouts Diamonds, contacted FBI Little 


Rock to inform they may have been a victim of a computer intrusion. 

[ Jaavisea that on October 18, 2011, her office received an b6 
"e-mail bomb" resulting in approximately 7,000 e-mails per hour bein. BIG 
sent to her[__| Girl Scouts e-mail account. On October 19, 2011, 


of Girl Scouts Diamonds, received an e-mail confirming 
a bank transfer which she did_not_ authorize. contacted 
Centennial Bank who informed twelve bank transfers of $7,500.00 


each were sent to different recipients throughout the United States. 
The total amount that was illegally transferred from Girl Scouts 
Diamond's bank account was approximately $90,000.00. The transfers 
happened on or around the same time Girl Scouts Diamonds received the 
e-mail com [id the only authorized issuer of bank transfers for 
Girl Scouts Diamond stated she did not authorize any of the bank 


transfers. 
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Title: (U) Case Closing 
Re: —— | 05/29/2013 b3 
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Writer proceeded to interview recipients of the twelve bank 


transfers as vell as Centennial Bank[ 


stated transfers made to recipients came from Girls Scouts Diamonds 
online bankin rofile, and all traffic seemed legitimate from the 
bank's dice] orawiosa writer with IP addresses used to log 


into Girl Scout Diamonds online profile as well as names, and banking 


information of all recipients of illegal transfers. 


Writer interviewed 
all recipients of the transfers. The recipients stories were very 
similar in nature. Recipients stated they found work at home jobs from 
websites such as Monster.com and Careerbuilder.com. Often their job 
description entailed retrieving money into bank accounts, and later 
send the money overseas via Western Union or Moneygram. Many recipients 
provided work contracts, and other documentation supporting their 
claims. 
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Writer informed AUSA Lo iddor the progress of the case. On bE 


May 29, 2013 writer received verbal declination from the AUSA regarding PIS 
prosecution. Due to the fact there is no new information in the case, 

and all current investigative options have been exhausted, writer 

requests the above captioned case be closed. 
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Precedence: ROUTINE Date: 10/31/2011 
To: Little Rock 
From: Little Rock 


Squad 6 
Contact: 


b3 
bé 
b7c 
b7E 


Approved By: 
Drafted By: 
Case ID #: 
Title: UNSUB; 


GIRL SCOUTS~—D. 
TER 


ONDS (VICTIM) ; 


Synopsis: To request a full field investigation be opened on the 
captioned matter 


Details: Writer requests a full field 
the captioned matter. 
Diamonds, contacted FB ai e@ ROG 
a victim of a computer intrusion. advised that on 
October 18, 2011, her office received an "e~mail bomb" re 

in approximately 7,000 e-mails, per hour being sent_to her 
Girl Scouts email_account, Mm October 19, 2011, of Girl 


Scouts Dia received a =mail confirming a 
authorize. contacted 
twelve Dan Transfers of 


bank transfer which 5s 

Centennial Bank who #+fiformed 

$7,500.00 each ene Sak to recipients throughout the 
United States. The total amount that was illegally transferred 
from Girl Scouts Diamond's bank account was approximately 
$90,000.00. The transfers happened on or aroun e time 
Girl Scouts Diamonds received the e-mail bomb. the only 
authorized issuer of bank transfers for Girl Sc onds , 
stated she did not authorize any of the bank transfers. 
Centennial Bank has been able to retrieve approximately 
$30,000.00 of the unauthorized taansferred funds. 


Gi out, iamonds,, believ 
an employee might have operfed a malicious email, and malware wi 
downloaded on their network. 


estigation be opened on 
i Ss is 


orm they may have been 


UNCLASSIFIED 


Coge 


¥ 


@ UNCLASSIFIED e 


To: Little Rock From: Little Rock 


Re: [sds «10/31/2011 b3 
i DIE 


Writer requests a full field investigation be opened on 
the captioned matter 


Sad 


UNCLASSTFIED 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/31/2011 


2011,, ———SS—S™—~«&dY:C date: of bith (DOB) 
Girl Scouts-Diamonds of Arkansas, Oklahoma 
and Texas (GSD), address 615 West 29th streets North Little Rock, 
email address 

| 
| 
| 
i 


Arkansas _72114, work phone number cellular phone bé 
was interviewed telephonically. 


e€ identity of the interviewing agent and 
the nature of the interview,| provided the following 
information. 

On October 18, 2011 at approximately 1:07 P.M., twelve 


bank transfers for approximately $7,500.00 each were withdrawn from 
GSD's bank account, and distributed to different bank accounts 


throughout the United States. that GSD did not 
authorize any of the bank transfers. expressed tha 
roximately the same time the transfers took place, GSD's 


received an "e-mail bomb". 
within GSD who has the authority to 


assign Bank transfers. 


bé 


According tolL___lon October 19th, contacted 44. 


Centennial Bank, and notified them of an e-mail received 
notifying her of an ACH transfer she didn't authorize. It was at 
this time Centennial notified GSD of the twelve transfers, and the 


approximate time at which they took place. [___]»e i 1 
the unauthorized transfers occurred at the same time. was 
not aware of who or where the money was sent to. elieved 


Centennial had recovered approximately $30,000.00 of the money that 
was sent. When one of the runners was interviewed by a receiving 
bank regarding a transfer of $7,500.00, he/she stated they were 
supposed to send $5,000.00 dollars, and keep $2,500.00 for 
themselves. ladvised she was given this information by 
Centennial, and didn't have any further details. 


Investigation on 10/25/2011 at Little Rock, Arkansas (telephonically 
b3 
File # Date dictated b6 
b7C 


by SA] bIE 


PO da ek cnet ete een ne ninee ane nee tee UL TT Oto aby meee cede Oa TINT ced fe Lanna te cae mete nes 


| FD-302 (Rev. 10-6-95) 
| 
ats 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 11/01/2011 


On October 26, 2011 date of birth 
of Girl Scouts Diamonds bé 
fo) rkansas, ahoma an exas,; West 29th Street, North Little pb7c 


Rock, Arkansas 72114, phone number was interviewed at 
his place_of business. e interview was FBI CART 
examiner 


of Girl Scouts Diamonds of Arkansas, Oklahoma, 


Scouts Diamonds of Arkansas, Oklahoma, and Texas. After being 


advised of the identity of the interviewing Agent and the nature of 
the interview, ]provided the following information: 


ae found suspicious files on 
computer after her computer was attacked by an “email bomb". 


isolated what he thought was a keylogger file and erased it from 
computer. [|etated that when notified about the be 
unauthorized transfers which took place on October_18, 2011, he bic 


started to piece together what had taken place. believes the 
"email bomb" which tock place approximately the same time as the 
unauthorized transfers, was a ploy to take_Girl Scout Diamonds 
attention away from their bank account. thinks this gave the 
criminals the opportunity they needed to Govértly remove funds from 
Girl Scouts Diamond's bank accounts. According to Girl Scouts 
Diamonds receive suspicious emails all the time. stated they 
received an email recently from a company purporting to be NACHA. 
could not remember the details of the email, however he 


remembers receiving it, amongst oth icious in nature. The 
suspicious files that found on computer were dated 
that they were installed on or around the first week of September 
2011. 
Investigation on 10/26/2011 at North Little Rock, Arkansas : 
b3 
File Date dictated b6 
BIC 


by SA. bIE 


e 


FD-302 (Rev. 10-6-95) 
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FEDERAL BUREAU OF INVESTIGATION 


October 


Date of transcription 11/01/2011 


26, 2011, 


of Girl Scouts Diamonds of Arkansas, Oklahoma, and 


Texas, 615 West 29th 
phone number 


oO ir couts Diamonds o Arkansas 


eC arm ot Girl Scouts Diamonds oF 
Arkansas, Oklahoma and Texas. After being advised of the i i 


Rock, Arkansas 72114, 
email address 


fe) Texas, 


identit 
of the interviewing Agent and the nature of the interview, [ —__] 
provided the following information: 


[ eror| Provided a time line outlining pertinent events 
of the alfeged criminal intrusion. The time line reads as follows: 


10-18-2011 1:07:52 pm. Unknown at the time, someone accessed the 


Girl Scouts-Diamonds 


checking account online and twelve online 


transfers of $7,500.00 each were made to numerous banks under 
numerous names, for a total of $90,000.00. At the same time 
thousands of emails in an &quot; email bomb équot; attack. The 


email bomb was meant 


as a decoy. The IT guy found Trojans or 


keystroke monitors which he deleted. 


10-18-2011 2 ae of email spam flooding computer 
after GSUSA webinar on Computing operating reserves. At the end of 


the work day several 


thousand emails had arrived, and it was a 


constant stream her my computer. 


10- 19- 11 about 11:00 


stated | wanted 


10-19-2011 called and left messages for [ana 
at Centennial Bank 


10-19-2011[._____] contacted the Little Rock FBI, and was told by 


receptionist to post 


am checked ACH bank website ena aoa. 
an unusual transaction in soft ACH posting o 


called Centennial bank at ebanker department and spoke to 


said that if id not post the 


ee - ee "hacked". [=— =] 


to make some calls and call me back. 


complaint on Internet Crime Complaint Center. 


Investigation on 10/26/2011 at 


File # 


North Little Rock, Arkansas 


Date dictated 


bic 


FD-302a (Rev. 10-6-95) 


1o-20-201{ | re~contacted the FBI and left a voice mail. ee 


10-20-2011 Girl Scouts-Diamonds received promises from Centennial eee 


Bank for approximately $30,000.00 in ACH reversals to return to 
account by Monday morning October 24, 2011. 


L_] stated she is the only employee that has the 
authority Eo make bank transfers on be-half of Girl Scouts- 
Diamonds. | stated she has access to e-mail and the 
internet, Nowever she does not remember receiving nor opening any 


suspicious emails. 


provided a copy of the time line of events and a 
copy of thé Intérnet Crime Compliant Center report which was placed 
in a 1-A envelope. 


FD-302 (Rev. 10-6-95) 


ape 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 11/04/2011 


On October 26, 2011 Special Agent 
and FBI CART i exf met 
pose eed Girl Scouts Diamonds 0 rkansas, ahoma, and 


Texas, at his place of emplo 
Little Rock, Arkansas 72114. 
computer, serial number 
to give consent to searc 


15 West 29th Street, North 
rovided a Dell Optiplex 330 


e€ computer. signed a consent to 


advised he had the authority 


search form for the computer, and was given a copy of the property 


receipt. The signed consent form and original property receipt 
were placed in a FD-340 envelope. 


be 
b7c 


Investigation on 10/26/2011 at North Little Rock, Arkansas 


File # Date dictated 


by SA 


b3 
b6 
b7C 


b7E - 


NX @ ® 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transoription §=_11/04/2011 


was interviewed at his place o 
business. After being \advised of the i i he interviewing 
Agent and the nature of the interview, provided the 


following information: 


povided S(t eee ees 
py Girl Scouts Diamonds of 
rkansas,; ahoma, an: exas. The following is a summary of the 


results: 


Investigation on 11/2/2011 at Conway, Arkansas 


Date dictated 


e & 


ED-302a (Rev. 10-6-95) 


Continuation of FD-302 of i _ ——— _ | »On 13/2/2011 »Page __2 


Centennial was able to verify that the template that was 
created had no 'Parent' template, meaning that it was created from 
scratch, and was not created from an existing template. On October 
18, 2011, twelve ACH transfers for $7,500.00 each were sent to 
various bank accounts throughout the United States. 


provided a copy of the ACH batch which was 
sent out October 18, 2011. This batch was not authorized by Girl 
Scouts Diamonds. The information provided includes the recipients 
name, bank account number, routing number, and the amount which 
they received. The effective date on all of the transfers were 
October 19, 2011. The following isa summary of the results: 


Name: 
Bank: 
Account number: 
Routing number: 


Name: 
Bank: 
Account number: 
Routing 


Name: 
Bank: 
Account number: 
Routing number: 


b6 
bic 


FD-302a (Rev. 10-6-95) 


Continuation of FD-302 of [oY >On 11/2/2011 Page _ 3 


Account 
Routing 


Name: 
Bank: 
= Account number: 
Routing 


Name: 
Bank: 
Account number: 
Routing 


Name: 
Bank: 
Account 
Routing 


a ae scheduled to receive two separate 
ACH transfers for $7,500.00 a piece. 


Name: 
Bank: 
Account number: 
Routing 


b6 
bICc 
bIE 


Name: 
Bank: 
Account number: 
Routing 


Name: 
Bank: 
Account number: 
Routing number: 


All of the aforementioned transfers 500.00 
each for a total of $90,000.00. According to 
Centennial has been able to recover approximately ; ~00. 


Centennial will continue working with the banks to r ch 
of the illegally transferred proceeds as possible. 
provided a copy of the ACH transfers, as well as the 


CO J which was placed in a FD-340 envelope. 


FD-302 (Rev. 10-6-95) 


ats 


FEDERAL BUREAU OF INVESTIGATION 


Date -of transcription 11/04/2011 
On November 3, 2011 Special Agent 


met Girl Scouts 
Diamonds oO rkansas, ahoma, and Texas, a is place of 
employment 615 West 29th Street, North Little Rock, Arka 2114. 
Writer returned a Dell Dimension 330 Optiplex computer. 
advised he had the authority to receive the computer. signed 
and was given a copy of the property receipt. The origina 
property receipt was placed in a FD-340 envelope. toe 
Investigation on 11/03/2011 a North Little Rock, Arkansas 
b3 
File Date dictated bé 
b7c 
by 8. 


(Rev. 05-01-2008) 6 .] 
b3 


UNCLASSIFIED bé 
b7C 


FEDERAL BUREAU OF INVESTIGATION bIE 


Precedence: ROUTINE Date: 11/04/2011 
To: Little Rock 


From: Little Rock 
Squad 6 


Approved By: 


Drafted By: 
Case ID #: 
Title: UNSUB; 
GIRL SCOUTS DIAMONDS (VICTIM); 
COMPUTER INTRUSION 


Synopsis: To request a Grand Jury Subfile be opened 


Details: Writer requests the following Grand Jury Subfile be 
opened: 


++ 


UNCLASSIFIED 


b3 
b6 


- ot 
. @ @ 
"Rev, 05-01-2004 . 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 
Precedence: ROUTINE Date: 02/08/2012 
To: Los Angeles Attn: Squad CYy~-1 


From: Little Rock 


Squad 6 


: b3 
Approved By: Le 
: b7C 
Drafted By: DIE 
Case ID #: 
Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 
Synopsis: To set lead for interviews of possible 
witnesses/subjects 
Details: ontacted , 
FBI Little . 
computer intrusion. i that on October 18, 2011, 
her office received an “e-mail b resulting in approximately 
7,000 e-mails per hour being sefit_to her] ciel Scouts email 
account. On October 19, of Girl Scouts Diamonds, 
received e-mail confirming a bank transfer 
- which she did not autho#ize. 
ntacted i ank and was informed 
twelve bank transfers of $7,500, each were sent to different 
recipients throughout the United States. The total amount that 
was illegally transferred from Girl Scouts Diamond's bank account 
was approximately $90,000.00. The transfers happened on or 
around time Girl Scouts Diamonds received the e-mail 
bomb. the only authorized issuer of bank transfers for 
Girl Scouts Diamonds, stated she did not authorize any of the 
bank transfers. 
Centennial Bank provided a copy of the ACH batch which 
was sent out October 18, 2011. This batch was not authorized by 
Girl Scouts Diamonds. The information provided includes the 
UNCLASSIFIED b3 
bé 
B7C 
bTE 
> i 


UNCLASSIFIED 
To: Los Angeles From: Little Rock 
nee [EP oroe oie 


recipients name, bank account number, routing number, and the 
amount which they received. The effective date on all of the 
transfers were October 19, 2011. One of the recipients of 
illegal transfers was: 


Name: 
Bank: 
Account number: 
Routing number: 


The lead set forth below request contact and interview 
with the recipients of the unauthorized transferred funds. 
Little Rock requests logical interview and investigation with 
specific attention to the following questions and points: 


1. How was the runner first contacted? What was the 
runners understanding of the transaction both then and now? 


2. How were ongoing communications with handlers 
established? If possible gather past e-mails, e-mail addresses, 
and e-mail header information. 


3. Where did the runner send the funds once received, 
and what percentage did they keep. 


4. If the runner found the job on a website what is the 
website address and is it still active. 


5. Was this the first time the runner received funds? 


If not how many times and how much have they received in the 
past? 


LEAD (s): 
Set Lead 1: (Action) 
Los Angeles 


AT Los Angeles, CA 


UNCLASSIFIED 


2 


UNCLASSIFIED 


To: Los Angeles From: Little Rock 

Contact and intery 
received $7,500.00 into his irl 
Scouts Diamonds on_or around October 18, 2011. social 


er is and his Date of Birth is 
est ation is: telepho: 
and and home address 


He lists his current employer as 


+ 


UNCLASSIFIED 
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b3 
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(Rev. 05-01-2008) : 


UNCLASSIFIED 


RAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/01/2012 
To: Dallas Attn: Squad _C-5 
SSA 
Mobile Attn: Squa 
SSA 


From: Little Rock 
Squad 6 
Contact: 


Approved By: 
Drafted By: 
Case ID #: 
Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 


Synopsis: To set lead for interviews of possible 
witnesses/subjects 


Details: contacted 
FBI Little Rock to/inform they may have en a victim of a 
computer intrusion. on October 18, 2011, 
her office received an "é-mail bomb" 0 ees in approximately 


7,000 e-mails per hour being sent_to her GirY Scouts email 
ober 19, 2011, Girl Scouts” Diamonds, 
received an e-mail confirming bank transfer 
which swe did not authorize. 


contacted Centennial Bank and was informed 
twelve bank transfers of $7,500.00 each were sent to different 
recipients throughout the United States. The total amount that 
was illegally transferred from Girl Scouts Diamond's bank account 
was approximately $90,000.00. The transfers happened on or 

around the same time Girl Scouts Diamonds received the e-mail 

bomb. the only authorized issuer of bank transfers for b3 
Girl Scouts Diamonds, stated she did not authorize any of the b6 


bank transfers. b7C 
bTE 


UNCLASSIFIED 


934 Ja. te 
a 


To: Dallas From: Little Rock 
Re; Le] 02/04/2012 


UNCLASSIFIED 


Centennial Bank provided a copy of the ACH batch which 
was sent out October 18, 2011. This batch was not authorized by 
Girl Scouts Diamonds. The information provided includes the 
recipients name, bank account number, routing number, and the 
amount which they received. The effective date on all of the 
transfers were October 19, 2011. Two recipients of illegal 
transfers were: 


Leads set forth below fequest contact and interview 
with the recipients of the unauthorized transferred funds. 
Little Rock requests logical interview and investigation with 
specific attention to the following questions and points: 


1. How was the runner first contacted? What was the 
runners understanding of the transaction both then and now? 


2. How were ongoing communications with handlers 
established? If possible gather past e-mails, e-mail addresses, 
and e-mail header information. 


3. Where did the runner send the funds once received, 
and what percentage did they keep. 


4. If the runner found the job on a website what is the 
website address and is it still active. 


5. Was this the first time the runner received funds? 


If not how many times and how much have they received in the 
past? 


UNCLASSIFIED 


2 


& e 


UNCLASSIFIED 


To: Dallas From: Little Rock 


LEAD (s) : 


Set Lead 1: (Action) 


DALLAS 


AT DALLAS, TX 


Contact and_interview received ——~p3 
$7,500.00 into his rom Girl 96 
Scouts Di social security DIE 


is a joint account 
account. Best contact information 
and home address 


number is 
holder on 
ae . 


Set Lead 2: 
MOBILE 


AT MOBILE, AL : 


Contact and interview 
received two transfers for $7,500 
account_on October 


number is[_ 
and his date of_b 
information is: address 


+o d 


Tcencé number is 
Best contact 


UNCLASSIFIED 


3 


; e od 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/09/2012 
To: Knoxville Attn: Cyb: 
SSA b3 
b6 
From: Little Rock DIC 
Squad 6 DIE 


Contact: 
Approved By: 
Drafted By: 
Case ID #: 
Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 


Synopsis: To set lead for interviews of possible 
witnesses/subjects 


Details: 
FBI Little been a victim of a 
computer intrusion. advised that on October 18, 2011, 
her office received an "e-mail bomb™ fe in approximately 


contacted 


7,000 e-mails per hour being sent to her Gi41l Scouts email 
nm October 19, 2011 amonds, 
received an e-mai bank transfer 
which She did not authorize. 


[eco] contacted J—Bank and was informed 
twelve ban ransters of $7,500.0% each were sent to different 


recipients throughout the United*’States. The total amount that 
was illegally transferred from Girl Scouts Diamond's bank account 
was approximately $90,000.00. The transfers happened on or 


account. of Girl Sco 


confirming 


around, time Girl Scouts Diamonds received the e-mail 

bomb. ee the only authorized issuer of bank transfers for pe 
Girl Scouts Diamonds, stated she did not authorize any of the BE 
bank transfers. ‘es 


Centennial Bank provided a copy of the ACH batch which 
was sent out October 18, 2011. This batch was not authorized by 
Girl Scouts Diamonds. The information provided includes the 


UNCLASSIFIED 


Cw ie cr +4 


UNCLASSIFIED 


Knoxvill rom; Little Rock 


recipients name, bank account number, routing number, and the 
amount which they received. The effective date on all of the 
transfers were October 19, 2011. One of the recipients of 
illegal transfers was: 


. b3 
Name: b6 
Bank: bIC 
Account number: bTE 


Routing number: 


The lead set forth be¥ow request contact and interview 
with the recipients of the unauthorized transferred funds. 
Little Rock requests logical interview and investigation with 
specific attention to the following questions and points: 


1, How was the runner first contacted? What was the 
runners understanding of the transaction both then and now? 


2. How were ongoing communications with handlers 
established? If possible gather past e-mails, e-mail addresses, 
and e-mail header information. 


3. Where did the runner send the funds once received, 
and what percentage did they keep. 


4. If the runner found the job on a website what is the 
website address and is it still active. 


5. Was this the first time the runner received funds? 


If not how many times and how much have they received in the 
past? 


LEAD (s) : 
Set Lead 1: (Action) 
Knoxville 


AT Knoxville, TN 


UNCLASSIFIED 


2 


UNCLASSIFIED 
To: i om: Little Rock 
Re: 02/09/2012 


Contact and interview 


received $7,500.00 into a ee eee ee £75 Girl 
node 


Scouts Diamonds on 


a Tennessee drivers license number of 


h 
information is: telephone number 


UNCLASSIFIED 


3 


b3 
bé 
b7Cc 
b7E 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/08/2012 
To: Miami Attn: Squad_C-5 
SSA 
From: Little Rock 
Squad 6 
Contact: 


Approved By: 


Drafted By: 


Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 


Synopsis: To set lead for interviews of possible 
witnesses/subjects 


Details: 


Diamonds, contacted 
computer intrusio: on October 18, 2011, 
her office received & @-mail bomb" resulting in approximately 
7,000 e-mails per hour being s Scouts email 
October 19, 2011, 
received an e-mai 
not authorize. 


confirming bank transfer 


ank and was informed 
twelve bank transfers of $7,500.0M% each were sent to different 
recipients throughout the United/States. The total amount that 
was illegally transferred from Girl Scouts Diamond's bank account 
was approximately $90,000.00. The transfers happened on or 
around time Girl Scouts Diamonds received the e-mail 
bomb. [esse the only authorized issuer of bank transfers for 
Girl ScoUtTS Diamonds, stated she did not authorize any of the 
bank transfers. 


contacted Cente 


Centennial Bank provided a copy of the ACH batch which 
was sent out October 18, 2011. This batch was not authorized by 
Girl Scouts Diamonds. The information provided includes the 


UNCLASSIFIED 7 


On pa. be =] 


UNCLASSIFIED 
jami ;_ Little Rock 
02/08/2012 


recipients name, bank account number, routing number, and the 
amount which they received. The effective date on all of the 
transfers were October 19, 2011. One of the recipients of 
illegal transfers was: 


Name: 
Bank: 
Account number: 
Routing number: 


The lead set forth bélow request contact and interview 
with the recipients of the unauthorized transferred funds. 
Little Rock requests logical interview and investigation with 
specific attention to the following questions and points: 


1. How was the runner first contacted? What was the 
runners understanding of the transaction both then and now? 


2. How were ongoing communications with handlers 
established? If possible gather past e-mails, e-mail addresses, 
and e-mail header information. 


3. Where did the runner send the funds once received, 


and what percentage did they keep. 


4. If the runner found the job on a website what is the 
website address and is it still active. 


5. Was this the first time the runner received funds? 


If not how many times and how much have they received in the 
past? 


LEAD (s): 
Set Lead 1: (Action) 
Miami 


AT Miami, FL 


UNCLASSIFIED 


2 


UNCLASSIFIED 


i i : ittle Rock , 
02/08/2012 b3 

bb 

bICc 


BIE 


was 


Contact and interview 
© receive into 


contacted regarding a $7,500.00 
savings accoun eon 


@ was 
ctober 18, 2011. | sd ocia 
and her date of 
ion is: tele p@ number [and home address 
briefly contacting via telephone and verifying her phone 
number and addres 


oad 


UNCLASSIFIED 


3 


2 @ @ 
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% UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/13/2012 
To: Little Rock 
From: Little Rock 


Squad 6 
Contact: 


Approved By: 


Drafted By: 
b3 
Case ID #: b6 
b7C 
Title: UNSUB; — 


GIRL SCOUTS~DIAMONDS (VICTIM); 
COMPUTER INTRUSION 


Synopsis: To claim statistical accomplishments 


Detail, Writer subpoenaed 


riter continues 
logical investigation. 


UNCLASSIFIED 


Of pe sTar 


® @ 


es, UNCLASSIFIED 


To: Little Rock From: Little Rock 

Re: [___—_—~+4ds« 02/23/2012 b3 
b6 
bic 
BIE 

Accomplishment Information: 


Number: 
Type: 
ITU: 


Claimed By: 
SSN: 
Name: 
Squad: 6 

+o 


UNCLASSIFIED 


4 
“i é @ @ 
(Rev, 05-01-2008) . 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/08/2012 


To: Tampa Attn: Squad 8 
SSA 


New Orleans Attn: Cyber : = 


From: Little Rock 
Squad 6 
Contact: 


b3 
bé 
b7c 
b75 


Approved By: 
Drafted By: 
Case ID #: 


Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM) ; 
COMPUTER INTRUSION 


Synopsis: To set lead for interviews of possible 
witnesses/subjects 


Details: rere Girl Scouts Diamonds, contacted 
FBI Little Roc o intorm ey may have been a victim of a 


computer intrusion. [-____] advised that on October 18, 2011, 
her office received an “e-mail bomb" resulting in approximately 
7,000 e-mails per hour being sent _to Henle | Girl Scouts email 
account. On October 19, 2011, | ora Girl Scouts Diamonds, 

received an e-mail confirming a bank transfer 
which she not authorize. 


[ __]contactea Centennial Bank and was informed 
twelve ban ransters of $7,500.00 each were sent to different 
recipients throughout the United States. The total amount that 
was illegally transferred from Girl Scouts Diamond's bank account 
was approximately $90,000.00. The transfers happened on or 
around time Girl Scouts Diamonds received the e-mail 
bomb. Een] the only authorized issuer of bank transfers for 
Girl $ monds, stated she did not authorize any of the 
bank transfers. 


UNCLASSIFIED b3 


bé 
b7c 
b7E 


off bape 


@ UNCLASSIFIED @ 
To: Little Rock 
Re: 02/08/2012 


Centennial Bank provided a copy of the ACH batch which 
was sent out October 18, 2011. This batch was not authorized by 
Girl Scouts Diamonds. The information provided includes the 
recipients name, bank account number, routing number, and the 
amount which they received. The effective date on all of the 
transfers were October 19, 2011. Two of the recipients of 
illegal transfers were: 


. ba 
Name: 

bé 
Bank: b7C 
Account number: bIE 


Routing number: 


Name: 
Bank: 
Account number: 
Routing numbe 


The lead set forth below request contact and interview 
with the recipients of the unauthorized transferred funds. 
Little Rock requests logical interview and investigation with 
specific attention to the following questions and points: 


1. How was the runner first contacted? What was the 
runners understanding of the transaction both then and now? 


2. How were ongoing communications with handlers 


established? If possible gather past e-mails, e-mail addresses, 
and e-mail header information. 


3. Where did the runner send the funds once received, 
and what percentage did they keep. 


4. If the runner found the job on a website what is the 
website address and is it still active. 


5. Was this the first time the runner received funds? 


If not how many times and how much have they received in the 
past? 


UNCLASSIFIED 


2 


UNCLASSIFIED 
To: i Little Rock 
Re: 02/08/2012 b3 
b6 
b7e 
BIE 
LEAD (s): 


Set Lead 1: (Action) 
Tampa 


AT Tampa, FL 


Contact and interview, 


received 
$7,500.00 from Girl Scout Diaménds into nis ccount on 
. social security number is 
£ birth is Bést Contact” 
information is: 


New Orleans 


AT New Orleans, LA 


Contact and interview 


was 

hi i to receive $7,500.00 from Gir cou Tamonas into his 
a Account on or around October 19, 2011. 
to share a Account with 
account holder. 
and her d 
€ account is 
curity number TS 
“Best Céntact infor 
is: 


UNCLASSIFIED 


3 


(Rey, 05-01-2008) 


(33) UNCLASSIFIED 


Ao FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/22/2012 


To: Mobile Attn: Squad 7 


From: Little Rock 
Squad 6 b3 


p7c 
Approved By: BIE 


Drafted By: 
Case ID #: 


Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 


Synopsis: To set lead for interviews of possible 
witnesses/subjects 


Details: ee Cr Girl Scouts Diamonds, contacted 


FBI Little Rock to inform they may have been a victim of a 
computer intrusion. advised that on October 18, 2011, 
her office’ received an "e-mail bomb” resulting in approximately 
7,000 e-mails per hour being sent to heels t]eier Scouts email 
account. On October 19, ie en Girl Scouts Diamonds, 

received an e-mail confirming a bank transfer 
which she did not authorize. 


[ere contacted Centennial Bank and was informed 
twelve ba: ers of $7,500.00 each were sent to different 
recipients throughout the United States. The total amount that 
was illegally transferred from Girl Scouts Diamond's bank account 
was approximately $90,000.00. The transfers happened on or 
around time Girl Scouts Diamonds received the e-mail 
bomb. the only authorized issuer of bank transfers for 
Girl Scouts Diamonds, stated she did not authorize any of the 
bank transfers. 


Centennial Bank provided a copy of the ACH batch which 
was sent out October 18, 2011. This batch was not authorized by 3 
Girl Scouts Diamonds. The information provided includes the 


UNCLASSIFIED 


~ 


e UNCLASSIFIED @ 


To: Mobile From: Little Rock 


recipients name, bank account number, routing number, and the 
amount which they received. The effective date on all of the 


_transfers were October 19, 2011. Two of the recipients of 


illegal transfers were: 


Name: 
Bank: 
Account number: 
Routing number: 


Name: 
Bank: 
Account number: 
Routing number: 


The lead set forth below request contact and interview 
with the recipients of the unauthorized transferred funds. 
Little Rock requests logical interview and investigation with 
specific attention to the following questions and points: 


1. How was the runner first contacted? What was the 
runners understanding of the transaction both then and now? 


2. How were ongoing communications with handlers 
established? If possible gather past e-mails, e-mail addresses, 
and e-mail header information. 


3. Where did the runner send the funds once received, 
and what percentage did they keep. 


4, If the runner found the job on a website what is the 
website address and is it still active. 


5. Was this the first time the runner received funds? 


If not how many times and how much have they received in the 
past? 


UNCLASSIFIED 


2 


b3 
be 
b7Cc 
DIE 


UNCLASSIFIED 


T.O% i : Little Rock 
Re: , 02/22/2012 


LEAD (s): 
Set Lead 1: (Action) 
MOBILE 


AT MOBILE, AL 


i 
Contact and Interview ase ) b3 
a 


b6 
er 18, 2011. Bre 
land ber date 77* 


telephone ntmbérs 


Contact and intervie 
scheduled to receive $7,500.00 Into 


October 18, 2011. 5 i rity number is 
and her .date.of bir z "Bes! or-Toloal 


information is the following: Home. 


7 a 


email address 


UNCLASSIFIED 


3 


Rev, 05-0: 
ca 


UNCLASSIFIED 


1 -25988) 
FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/21/2012 


pueuec oe [ 


From: Los Angeles 


yak 


Approved By: a 
b7C 
Drafted By: bIE 


Title: UNSUB; 
GIRL SCOUTS - DIAMONDS - VICTIM; 
COMPUTER INTRUSION 
Synopsis: To report results of lead. 
Reference: 
(s): (1) Original FD-302 of interview of orth 
{1)_1A envelope containing original note e 
interview o; (1) Original’ 302 documenting receipt of 


emails from (1) 4 mvyelope containing printed copies 
of the emails received from 


Details: At the request of Little_Rock, on 02/17/2012, Los 
Angeles contacted and interviewed The results 
of the interview are set forth in the FD-302 enclosed with this 
EC. Further, provided to Writer emails discussed in the 
interview; these emails have been included in a 1A envelope 


enclosed with this EC. 


Los Angeles considers this lead covered. 


UNCLASSIFIED 


e* UNCLASSIFIED 


To: Little Rock From: Los Angeles 


b7E 


LEAD (s): 
Set Lead 1: (Action) 
LITTLE ROCK 
AT LITTLE ROCK 


Read and clear. 


bad 


UNCLASSIFIED 
2 


Fo eacitlo.6-95) 
Ase 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 02/17/2012 


Social 


date of birth 


Security Account Number 
work telephone 
home telephone 


work mobile telephone 
email address 


After being 
ie interviewing agents, and the 
nature of the interview, lo leeouraca the following: 


recognized the account number 
routing number and identified it as his own. 
currently works at[ 
He has been so employed since 
November o 005. 


On or about October or November of 2011, 
received an email froma "VANTAGE SOFTWARE", purportedly 
out of the Netherlands. meee ie offered employment receiving 
and transferring funds for VANTAGE SOFTWARE. fs eeoeeteed 


interest in the employment, ce Se wee an employment contract 


which he returned by email. was told he would receive his 
first payment on a Monday, bw as payment never arrived. He 
notified the woman by email of this, and then received a telephone 
call from a woman who told him he would soon receive a payment of 
$7,500, and gave him instructions to wire it to a bank_account 
web eee ls was in "a Russian country". did 
not remember this woman's name, but recalls that she spoke with an 
accent. [__—sidiJwas unable to identify the accent, but thought it 
may have been European. was told he would be entitled to 
a 7% cut of the money he was to transfer. 


Within a_ couple da s,L___] receivea a wire_transfer 
of $7,500 to his account. About this time, 
grew suspicious and conducted internet searches pertaining to the 
tasks he was being asked to do, finding reports of similar 
"employment"_to often be linked to illegal scams and fraudulent 
activity. notified the woman that he "wanted no part of 
it", and instructed her to take back the money. The next day the 
money_was gone, the wire transfer having been reversed. At no time 
did] |aimseis transfer these funds from his account. 


Investigati 02/17/2012 a__Los Angeles, California 


File # Date distated Not Dictated 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed ontside your agency. 


b6 


b3 
be 
b7c 
bIE 


FD-302a (Revt-10-6-95) 


Ld 


cumimcoser [| on 02/37/2032? a2 


Chas not received any other payments similar to 
that described above, nor has he transferred money as ‘vy 
employment or scheme similar to that described above. fe ined 
on at least one other occasion received email from other, 
apparently unrelated, parties asking him to take part in activity 
similar to that described above, but has become convinced that it 
ig linked to illegal activity, and has ignored it. 


FD-302 (Rev. 10-6-95) 


ee 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 02/21/2012 


On February 17, 2012, Special Agent ("SA") 
received an email from email address be 
following up on @ interview conducted earlier BIC 


z notified SA L Jthat he did not retain any 
original emails from ee marae | but that he had saved his 


responses to those emails; provided to SAI these 
re s attachments to his email. The email from to 
SA and the included attachments, have been printed and 


included in the attached 1A envelope. 


Investigation on 02/17/2012 a Los Angeles, California (via email) 
b3 
File 4] Date dictated Not Dictated bé 
b7c 
vy Ss bIE 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. 


= rf : 
ae @ +: e 
(Rev. 05-01-2008) 
‘ UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


_ Precedence: ROUTINE Date: 03/13/2012 


To: Little Rock Wee BEER E SSE LY 


From: New Orleans 
Lake Charles RA 


Contact: SA b3 

b6 

Approved By: bic 
bTE 

Drafted By: 

Case ID #: 

Title: .UNSUB; 

GIRL SCOUTS-DIAMONDS (VICTIM) ; 
COMPUTER INTRUSION 
£ Oped Soyer zeae ae | 
Enclosure(s): Co of two (2) emails to from 
including header 

information; Applicant Details form filed b 

Employment Agreement provided by Western Union 

Wire Transfer form filled out ATM 

receipts for withdraws made by 

Details: 

met with 
b3 
b6 
bic 
bTE 


(Co } replied an online career opportunity with 
Advantage Software. ae ee provided an Employment Agreement 
and an Applicant Details form, which contained see name, 
contact “online, | | zeeet account information. Shortly after 


applying online, received an ACH funds transfer of 


UNCLASSIFIED 


* + 4 . : 
a BG vincer ® 
UNCLASSIFIED 
To: i rom: New Orleans 
Re: 03/13/2012 
$7,500.00 and was instructed to send two wire transfers via 
Western Union to the following recipients: 
b3 
b6 
b7C 
bIE 
Before being able to send any wire transfers, 
foundl__to be in possession of a mount of cash, and 
after further questioning, discovered was the victi an 
Internet scam. is a the co- 
account number 
notified 
ranch o advised the 
fraud had been reported _ank 
it of $7,500.00. and returned the money that 
| ad withdrawn, $4,500.00 account 
was closed. advised normal account 
| 
applied for the job through an online website 
and believed the job offer to be legitimate. The contact 
information provided to him was as follows: 
b6 
bic 
b3 


provided the following documents, which have 
been enclosed: 


- email dated 10/19/2011. 

- email dated 10/19/2011 

- Applicant Details form 

- Employment Agreement form 

- Western Union Transfer Form made out to receiver 


UNCLASSIFIED 


2 


: ee: @ 
UNCLASSIFIED 


i om: New Orleans 
03/13/2012 


- Copy of transaction receipts 
Identifying information tor[ | is as follows: 


Name - 
Last: 
First: | 
Middle: 
DOB: 
SSAN: 
Address: 


Lake Charles RA considers this lead complete. 


UNCLASSIFIED 


3 


b3 
be 
bIc 
BIE 


a 


UNCLASSIFIED 
. To: i om: New Orleans 
Re: 03/13/2012 b3 
bTE 


LEAD (3) + : 


Set Lead 1: (Action) i 
LITTLE ROCK 


AT LITTLE ROCK, ARKANSAS 


Read and clear. 


had 


UNCLASSIFIED 
4 


(Rev. 05-01-2008) 


4 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 03/22/2012 


To: International Operations Attn: Europe Unit 


From: Little Rock 
Squad 6 
Contact: 


Approved By: 
Drafted By: 
Case ID #: 


Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 


Synopsis: To provide information to Legat London 


Details: Ld of Girl Scouts Diamonds, contacted 
FBI Little Rock to inform they may have been a victim of a 
computer intrusion. advised that on October 18, 2011, 
her office received an "e-mail bomb" resulting in approximately 
7,000 e-mails per hour being sent to her [Giri Scouts email 
tober 19, 2011,[— Jof Girl Scouts Diamonds, 


received an e-mail confirming a bank transfer 
which she did not authorize. 


[ __]contactea Centennial Bank and was informed 
twelve bank transfers of $7,500.00 each were sent to different 
recipients throughout the United States. The total amount that 


was illegally transferred from Girl Scouts Diamond's bank account 
was approximately $90,000.00. The transfers happened on or 


around time Girl Scouts Diamonds received the e-mail 

bomb. | the only authorized issuer of bank transfers for b3 
Girl Scouts Diamonds, stated she did not authorize any of the be 
bank transfers. 


One of the recipients of illegal pr 

i heme was an individual named of 
On October 21, 2011, Special Agent 

met with and 


UNCLASSIFIED 


es 


| e UNCLASSIFIED @ 


To: i Operations From: Little Rock 
Re: 03/22/2012 b3 


b6 
b7C 
b7E 
, at their residence, 
regarding an Internet scam 
victim to. explained 
| replied to an online career opportunity with 
Advantage Software. Li _les provided an Employment Agreement 
and an Applicant Details form, which contained —| name, 
contact information, and bank account information. Shortly after 
applying online, [ _]received an ACH funds transfer of 
$7,500.00 and was instructed to send two wire transfers via 
Western Union to the following ,#ecipients: 
b6 
BIC 
Before being able to send any wire transfers, 
founeL___ to be in possession of a mount of cash, and 
after further questioning, discovered was the victim of an 
Internet scam. ‘is a the coraccount holder of 
account, account number went to 
and notified 
ranch © e money wi rew. advised the 
fraud had been reported_and that the account had received an ACH 
i returned the money that 
account 
was closed. b6 
b7C 


applied for the job through an online website 


and believed the job/offer to be legitimate. 


The contact 
information provided to him was as follows: 


UNCLASSIFIED 


2 


] 


e UNCLASSIFIED e 
To: International Operations From: Little Rock 


email address 


ain subscriber 


time/date stamp | 


f£ available, and gain any 
intelligence’ which may be of investigative value. 


any questions or concerns. 


It is,£equested L 
information offIP addresses 


UNCLASSIFIED 


e UNCLASSIFIED e 


To: Internation Operations From: Little Rock 
Re: 03/22/2012 


LEAD (s): 
Set Lead 1: (Info) 


INTERNATIONAL OPERATIONS 


AT WASHINGTON D.C. a 
Read and Clear 
Set Lead 2: (Action) 
LONDON 


AT LONDON, ENGLAND 


It is requested L ain subscriber 

ig dd time/date stamp [| 
7 and gain any 
igéence which may investigative value. 


UNCLASSIFIED 


4 


FD-302 Rev. 1046-95) 


ca 


== 
FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 3/13/2012 


Mtities of the in péeviewing Agents and the purpose of the 
interview,[ | provide: he following information: 


share the email 


address etober oO Lae eeeives 
a_work at home job offer via email at the aforementione address. 
[-_] was no ested in the offer; however,[ | responded to 
the email. Pe tvas told via email that the job would entail her 
receiving funds in her bank account, and then transferring the 
funds to individuals working for the company outside of the United 


States. LC Jeoula not recall me of the company; however, 
emails sent on 10/26/2011, that gave the interviewing Agents 


pS the interview identified ]@ sender as COMO LAW FIRM, 
== setup as savings account in order to 
receive the funds to be transferred, aa told that she would 


receive approximately $4,500.00 in her personal account, and she 
could_keep approximately $600.00. The abovementioned email stated 
that [frou receive $6,500.00, and her commission would be 
$610. he scheduled date of the aforementioned transaction was 
10/26/2011; however,[ | never received any funds. 


[__|statea that she never received any funds into her 
account, and she never transferred any funds. 


[_ ]receivea telephone calls and text messages from 
individuals from the company she was supposed to king for; 
however, they were no longer on her cell phone. tried to 
save the text messages, but when she went to look em during 
the interview, they were no longer on her phone. told the 
interviewing Agents that the telephone numbers the 
came from @id not look like valid telephone numbers. 
not remember the iss number that had called her Tégarding the 


money transfers. agreed to forward all the emails she 


-L 


03 


Investigation on. 


Date dictated not dictated 


ord _jo2.302 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBY and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 


b7Cc 


FD-302a (Rey. 10-6-95) 


b3 
bé6 
b7C 
bTE 


received regarding the money transfers to the interviewing Agents. 


x 


Rev. 05-01-2008) 
* 


vo 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 03/13/2012 


mo: Little Rock es 
Squad 6 Cyber 


From: Miami 


Cc-5 


b3 
Approved By: 6 
bTc 
Drafted By: b7E 
Case ID #: (U) 
Title: (U) UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM) ; 
COMPUTER INTRUSION 
Synopsis: (U) To document the results of lead covered. 
Details: (U) Pursuant to a lead i ced serial, 
on 03/12/2012, Spacial Agent (SA} and SA 
interviewed date of 
i i residence 
telephone number 
at the above-mentioned address. The results of 
the interview were documented in a 302. 
An email header recov ving the above-mentioned e 
interview from an email sent to pertaining to a pending yk 
money transfer was sent from the email address b7E 


riginating IP address 

to transfer any money she received to 
if sent via Western Union or 
if sent via Money Gram. 


The email instructed 


(U) Pending further requests from Little Rock or new 
information relating to specific information in the referenced] 
serial, Miami considers this lead to be covered. 


UNCLASSIFIED 


‘ UNCLASSIFIED 

| v0: dacksonyvi From: Miami 

is Re: (U) 03/12/2012 b3 
bé 
b7c 
b7E 


Set Lead 1: (Info) 
LITTLE ROCK 
AT LITTLE ROCK, AR 


(U) Please read and clear. 


07 OS .ec 
of 


UNCLASSIFIED 


2 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/06/2012 


From: Little Rock 
Squad 6 
Contact: 


b3 

Approved By; b6 
BIC 

Drafted By: bIE 
7D 

Case ID #: 

Title: UNSUB; 

GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 

Synopsis: To provide information to Legat 

Details: eae | of Girl Scouts Diamonds, contacted 

FBI Little Rock to inform they may have been a victim of a 

computer intrusion. fo advised that on October 18, 2011, 

her office received an "e-mail bomb" resulting in approximately 

7,000 e-mails per hour being sent_to 4 Girl Scouts email 

account. On October 19, corr ee Girl Scouts Diamonds, 

received an e-mail confirming a bank transfer 
which she did not authorize. 
contacted Centennial Bank and was informed 

twelve bank transfers of $7,500.00 each were sent to different 

recipients throughout the United States. The total amount that 

was illegally transferred from Girl Scouts Diamond's bank account 

was approximately $90,000.00. The transfers happened on or 

around time Girl Scouts Diamonds received the e-mail 

bomb. the only authorized issuer of bank transfers for b3 

Girl Scouts Diamonds, stated she did not authorize any of the BG 

bank transfers. poe 


Centennial Bank provided a copy of the ACH batch which 
was sent out October 18, 2011. This batch was not authorized by 
Girl Scouts Diamonds. The information provided included the 
recipients name, bank account number, routing number, and the 


UNCLASSIFIED 


Or pt te 


UNCLASSIFIED 


To: From: Little Rock 
Re: 04/06/2012 


amount which they received. The effective date on all of the 
transfers were October 19, 2011. * 


home residence. share ee 
the email address[____ Sn October of 2011, Re 


received a work at home job offer via email at the 


aforementi address. was not .4 ed in the offer; ake 
however, responded To e email. was told via email 
that the Job would entail her receiving TundS in her bank 


account, and then transferring the* funds to indivi ls working 
for the company outside of the United States. could not 


recall the name company; “however, emails sent on 
10/26/2011, that gave thé interviewing Agents during the 
interview identifié © sender as COMO LAW FTRM,. 


An email header“recov ring the above-mentioned 
interview from an email Sent Ole eae to a pending 
money transfer was sent’ from the email address 

originating IP address 

r any money she received to 
if sent via Western Union or 
if sent via Money Gram. 


pen source database checks 


UNCLASSIFIED 


2 


4 
aa e UNCLASSIFIED 

To: 2 Little Rock 

Re: 04/06/2012 
b3 
b6 

LEAD (s) : b7c 
bIE 

Set Lead 1: (Action) bID 


It is requested 
information of IP address 


gain any 
intelligence which may be of investigative value. 


+ 


UNCLASSIFIED 


3 


FD-302 (Rev. 10-6-95) 


wie 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 04/12/2012 


imately 11:00 A.M. 

and SA 
, social security nu 
at 
After Ddéing advised of the identities of the 
provided the following information: 


interviewing agents, 


Po kes contacted directly by e-mail with a job offer to 
receive funds into an account and transfer it by Western Union into 
subsequent accounts, keeping a percentage as a fee. provided a 
copy of his driver's license and phone number to the employer. 
Upon receiving $7,500.00 dollars, [ |transferred approximately 
$5,000.00 to individuals with "Russian" sounding names. At this 
point,[ |began to questi @ legality of the operation. The 
employer started to harass about the remaining mone sO 
went to the Rowlett Police Department and his bank, 

He provided the remainder of the funds; 
pefeise ely $2,000.00 dollars, to the bank's security department. 


also provided all corresponden and information to the bank. 
This was the first last eime[_ | has taken this type of money 
transferring job. is currently Finishing his degree, and took 


the job in an effort to contribute to his family's finances. Once 

it was confirmed that the money he received was stolen, he told the 
bank that he would be willing to payback the money he transferred, 

once he graduated. 

with his employer and provide them to SA 


LC Jagreea to attempt to locate = of his communications 


Investigation on 4/09/2012 a Dallas, Texas 


File Date dictated 4/12/2012 
S. 
w Ss. 
This document contains neither recommendations nor conclusions of the FBI. it is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. 


b6 
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¢ 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/12/2012 


To: Little Rock Attn: Squad_6 


SSA 
SA 


From: Dallas 


Cyber C5 3 
Contact: SAI G6 
Approved By: as 


Drafted By: 


Case ID #: 


Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM) ; 
COMPUTER INTRUSION 


Synopsis: To cover lead for the Little Rock Division. 


Enclosure (s): 


* FD-302 interview of 
e FD-340 1A containing: jeximi 
Texas driver's license photo 


Details: On Monday, April 9 
Writer and Special Agent 
social security number 
at 


nu er 
Ea @r bdeéing advised of the identities of the interviewing 
agem 8,[/ provided the following information: 


2012, at approximately 11:00 A.M., 


located 
telephone 


L 


L_]was contacted directly by e-mail with a job offer BS 
to receive Funds into an account and transfer it by Western_Union 6 


into subsequent accounts, keeping a percentage as a fee. Bye 
provided a copy of his driver's license and phone number to e PIE 
employer. Upon receiving $7,500.00 dollars,[[ J|transferred 
approximately $5,000.0 individuals with "Russian" sounding 

names. At this point, began to question the legality of the 


operation. The employer started to harass[__ | about the 


UNCLASSIFIED 


UNCLASSIFIED 


To: Little Rock From: Dallas 


remaining ett Police Department and 
his bank, He provided the 
remainder of the funds, nee [Jets $2,000.00 dollars, to the 

T 


bank's security department. also provided all correspondence 

information to the bank. is was the first an t time 

has taken this type of money transferring job. is 
currently finishing his degree, and took the job in an effort to 
contribute to his family's finances. Once it was confirmed that 
the money he received was stolen, he told the bank that he would 
be willing to payback the money he transferred, once he 
graduated. 


L Jagreea to attempt to locate any of his 
communications with his employer and provide them to Writer. To 
, Writer has not received any additional information from 

but any future information will be sent to the case agent 
accordingly. 


Dallas considers this lead covered. 


UNCLASSIFIED 


2 


UNCLASSIFIED 
To: Little Rock From: Dallas 
Re: 04/12/2012 
LEAD (s): 


Set Lead 1: {Info} 
LITTLE ROCK 
AT LITTLE ROCK 


Please read and clear. 


bad 


UNCLASSIFIED 


3 


b3 
b7E 


Sentinel Working Copy 


w 


lof2 


Gling and Security 


Details 


De 


Approval Dat 


Initiated: 


Serial #: 


jecument Title: 


Ctassification 


Gonten 


e e ——_ 


| Case Title: {U) GIRL SCOUTS DIAMONDS - 
COMPUTER INTRUSION 


Fall investigation . 


11/02/2041 
Type: EC 
REPORT LEAD RESULTS TO LITTLE ROCK. b3 
04/27/2022 b6 
su bIC 
bIE 
Precedence: ROUTINE Date: 04/17/2012 
From: Mobile 
Squad 7 
Contact 7 
Approved By: 
Drafted By: 
Case ID #: 
Title: UNSUB; : 
GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 
Synopsis: Report Lead results to Little Rock. 
Englosure (s): ) oxiginal signed FD-302 from the interview 
of 
Details: The following individual was requested to be contacted and 
interviewed pertaining to_hi $7,500 deposits 
being deposited into his account on or 
around 
10/18/2011: 
Telephone: b3 
; ; b6 
There were two deposits of $7,500 sent to his 
account back in October, 2011, but one (1) of the $7,500 deposits was b7C 
“taken out" before he transferred any money. He was only able to keep b7E 


10" commission on $7,500, not a total of $15,000. 
C1 kept a commission of "108", then transferred the 
remaining funds, via Western Union, to other people, but he can't 
remember if they were located in the United States or in foreign 
countries. There are no Western Union receipts to provide and 
did not think he still had any emails from TOHO, but he 
would 
look closer and send them if he did find any. 


As all logical investigative steps have been completed, 
Mobile Division considers this matter Closed. 
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. Drafted by: bE 
bIC 
Approved by: LIE 
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Filing and Security 
Primary Gas | Case Tite: (0) GIRL SCOUTS DIAMONDS - 
. COMPUTER INTRUSION 


Serial Number, 


Category: Full Investigation 
Initiated: 11/02/2011 


Details 


sere] | ‘Type: FD302 
Document Tite: INTERVISH ne BS 
b6 


Approval Date: 04/17/2012 b7C 
Classification: SH 
BIE 


Contents: 04/17/2012 


Social Security Account Number (SSANL: . 
currently residing at 

Was interviewed concerning his of 

gwo (2) $7,500 deposits being deposited into his[___] 

To account. arter being advised of the Identity of the : 
Tnterviewing Agent and the nature of the interview, | 


voluntarily provided the following information: 


Ql) How was the runner first Contacted? What was the 
runners understanding of the transaction both then 
and now? 


Al) He was contacted via email from THE TOHO BANK, LED Werks 


(T0HO) offering h money 
deposited into his account, 
keep a commission o: then wire the remaining Coe 


funds via Western Union to specified bank accounts, 
provided to him by a person at TOHO via email. He 
was unaware that this was a scam at any point in 
time. 


02) How were ongoing communications with handlers 
established? 


A2) He only corresponded with them via email. 


Q3) Where did the runner send the funds once received, 
and what percentage did they keep? 


3} There were two (2) deposits of $7,500 sent to his 
account back in October, 2011, but one 
(1) of the $7,500 deposits was “taken out" before he 


transferred any money. He was only able to keep 
"108" commission on $7,500, not a total of $15,000. 


04) If the runner found the job on a website, what is the 
website address and is it still active? 


Aa) He had applied for multiple jobs on multiple websites 
on the internet, including CAREERBUILDER.COM and 
MONSTER.COM. Since he was contacted by them, he 

has no idea what job he applied for that triggered 

them contacting hin. 


95) Was this the first time the runner received funds? 
If not how many times and how much have they received 
in the past? 


as)[_____Joniy did this transaction “one time” and has b3 
not had any other dealings with TOHO since the bé 
aforementioned transaction that took place on or 

about 10/18/2011. BIC 


bIE 
There are no Western Union receipts to provide and 


did not think he stili had any emails from TOHO, but he 
would Look closer and send them if he did find any. 
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UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION - 


Precedence: ROUTINE Date: 04/20/2012 


re ee ee va [ 


From: Mobile 


Squad 7 
4 b3 
Contact: bé 
BIC 
Approved By: ise 
Drafted By: 
Case ID #: 
Title: UNSUB; 
GIRL SCOUTS-DIAMONDS (VICTIM); 
COMPUTER INTRUSION 
Synopsis: Report Lead results to Little Rock. 
Enclosure(s): 1) One_(1) original signed FD-302 from the interview 
of 
2) On = ontaining email printouts provided 
by 
Details: The following individuals were requested to be contacted and 
interviewed about their knowledge of $7,500 being deposited into each 
of theixr[ 7 SSCS~C«dzb counts on or around 10/18/2011: 
Name: b3 
DOB: bE 
SSAN: bIC 
Residence; Die 
Telephone; 
Name: 
DOB: 
SSAN: 


UNCLASSIFIED 


@ @ 


UNCLASSIFIED 
To: i ms ile 
Re: 04/20/2012 
Residence: BS 
b6 
Telephone: BIC 
bTE 


received $7,500 into hexLSSCSCSC—CSd COE on 
ox around 10/18/2011. She kept a commission of "5% or 10%", then 


transferred the remaining funds, via Western Union, to various bank 
accounts, provided by L_—— | around the world. 


did no have any Western Union receipts from her activities, but 


she was able to provide email correspondence between 
pee ee and herself, which is retained in the 1A 


section of this case file. 


(a) has been unresponsive to writer's request for 
an interview. e has no known employer and alli telephone numbers 
associated with her are no longer valid or do not accept voice mail 
messages. Writer has contacted 


on no less separ Tons and ted she relay 
writer's interview requests to Despite confirming to 
writer that she has relayed these requests, as not contacted 


writer at any point in time. 


Writer contacted the Case Agent for this matter and 
inquired if writer should send the information available now from 
so it's investigative value does not expire, or wait to see if 
makes contact. Writer and Case Agent agreed writer woul 
the information writer had available now, close the lead and a 
ever contacts writer and provides any useful information in the 
future, writer would forward it to Case Agent. 


As all logical investigative steps have been completed, 
Mobile Division considers this matter Closed. 


had 
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Be 


FD-302 (Rev. 10-6-95) 


m 04/12/2012, —__], p 


Social Se 
currently residing at 
interviewed concerning 


her 


-1- 
FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 04/12/2012 


eing deposited into 
account. After being. advised of the identity 


of the interviewing Agent and the nature of the interview, 
voluntarily provided the following information: 


Qt) 


Al) 


22) 


B2) 


Q3) 


A3) 


24) 


How was the runner first Contacted? What was the 
runners understanding of the transaction both then 
and now? 


She was contacted via email on 09/11/2011 b 
email account 
from THE TOHO BANK, LTD (TOHO ering 
osition. She would have money deposited into her 
account, she would keep a commission 
of "5% or 10%", then wire the remaining funds via 
Western Union to specified bank accounts, provided to 
her by a person at TOHO via email. She was unaware 
that this was a scam at any point in time. 


How were ongoing communications with handlers 
established? 


A few times she spoke with someone on the phone, but 
her caller id did not provide any information other 
than "Private Number" or "Unknown" number. Primarily 
it was via email correspondence. 


Where did the runner send the funds once received, 
and what percentage did they keep? 


She sent it to four (4) different accounts, specific 
account detail is provided in the email 
correspondence she provided contained in the 1A. She 
kept "5% or 10%", but can't remember exactly. 


If the runner found the job on a website, what is the 
website address and is it still active? 


Investigation on 04/12/2012 at Mobile, AL {telephonically} 


File 
ty SA 


This documes 


Date dictated 


Isions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency, 
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Did not receive, 
An index copy — 


only Couct copy: 


FD-302a (Rev. 10-6-95) 
Continuation of FD-302 of _———EEEee ,On 04/12/2012 __, Page 2. 


A4) She had applied for multiple different jobs on 
multiple different websites on the internet, 
including CAREERBUILDER.COM and MONSTER.COM. SInce 
she was contacted by them, she has no idea what job 
she applied for triggered them contacting her. 


Q5) Was this the first time the runner received funds? 
If not how many times and how much have they received 
in the past? 


| ae did this transaction "one time" and has 
no ad any other dealings with TOHO since the 


aforementioned transaction that took place on or 
about 10/18/2011. 


There are no Western Union receipts to provide, but [| 
provide. 
in the 1A section of this case Tile. 


b3 
be 
b7¢ 
b75 


Tr 


‘s a3 
yy Ger. 5-01-2008) ie . e 
UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/18/2012 


To: International Operations Attn: Eurasia Unit 
Attn: SSA 


From: Little Rock 
Squad 6 
Contact: 


Approved By: 
Drafted By: 
Case ID #: 
Title: UNSUB; 


PROFESSIONAL PROPERTY MANAGEMENT (VICTIM) ; 
COMPUTER INTRUSION 


contacted FBI Little k stati he had approximately 
57,000.00 withdrawn from his account 
in early July 2011. aes not authorize the transaction. 


Writer interviewed several employees ofL___]who stated they 


b3 
b6 
b7C 
B7E 
b7D 


ious email in June from e-mail address 
The email stated a ¥ ACH transfer[____] 
authorized had failed. Many employees from thought the e- 


mail was legitimate due to the fact that NACHA is the governing 
body of ACH transfers. A couple of employees opened the email, 
and the attachment that accompanied it. 


De elztated | |pank withdrawals occurred in two 
different batches, and were dispersed to several different bank 
accounts throughout the United States. The first batch was for 
$42,173.61, followed by the second batch which was $14,450.70. 


UNCLASSIFIED 


joy or. B¢ 


b3 
be 
b7c 
b7E 
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| bow UNCLASSIFIED 


To: International Operations From: Little Rock 


b7E 


The funds were dispersed to different "runners" 
throughout the United States. After subsequent interviews with 
these runners it came to fruition that most of these individuals 
expressed the belief they were working a legitimate job. Many of 
the runners found their "work at home" jobs from a reputable 
website such as Careerbuilder or Monster. A common theme 
revealed throughout the investigation has been the runners were 
instructed to set up bank accounts, receive money into these 
accounts, and subsequently to send the money overseas. 


Approxi on or around July 7, 2011 the following 
individuals in received Western Union transfers from 
identified runners in the aforementioned investigation: 


eceived two Western Union Transfers on or 
around July 7, 2011. One was for $1,885.00 and the other was for 
$2,864.00. 


b6 
b7C 


received one Western Union Transfer on or 
around July 7, 2011. The amount was $2,200.00. 


réceived one Western Union Transfer on or around 
@ amount was $1,585.00 


July 7, 


UNCLASSIFIED 
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UNCLASSIFIED 
To: International Operations From: Little Rock 
Re: 04/18/2012 b3 
bé 
BIC 
DIE 
received one Western Union Transfer on or 
around July 7, 2011. The amount was $2,864.00. 
received one Western Union, and one 
MoneyGram transfer on or around duly 7, 2011. The amounts were 
$1,974.00 and $1,585.00 respectively. 
bé 
BIC 
received one Western Union Transfer on or around 
July 7, 2011. The amount wags’ $2,280.00 
received one Western Union Transfer on or 
around July 7, 2011. The amount was $2,280.00 
bE 
Foles 


UNCLASSIFIED 
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UNCLASSIFIED 


To: International Operations From: Little Rock 


b3 
b6 
: . BIC 
eceived one Western Union Transfer on or bTE 
around July 7, . The amount was $2,350.00 bID 
received one Western Union Transfer on or 
around July 7, 2011. The amount was $2,350.00. 
The interview should include but not be limited to the 
following: 
a. 
b. Determine why 
bé 
b7C 
bIE 
c. Attempt to obtain any copies of all related 
documentation (i.e. instructions, e-mail messages, 
etc.). 
d. 
UNCLASSIFIED 
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. 


X 


To: 
Re: 


UNCLASSIFIED 


International Operations From: Little Rock 
04/18/2012 


Pop tamned on doing 


with the money. 


e. Determine whether 


£. Attempt to determine whether 


UNCLASSIFIED 
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UNCLASSIFIED 


To: International Operations From: Little Rock 
al 


LEAD (s) + 


Set Lead 1: (Action) 


AT b3 


The interview should include but not be limited to the 
following: 


a. 
b. 
i 
bé 
bB7C 
c. Attempt to obtain any copies of all related DIE 
documentation (i.e. instructions, e-mail messages, 
etc.). i 
{ 
d. Determine what 
e. 
UNCLASSIFIED 
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UNCLASSIFIED 


To: International Operations From: Little Rock 
2 aT ST 


Set Lead 2: (Info) 


INTERNATIONAL OPERATIONS 


AT_ WASHINGTON D.C. 
Read and Clear 
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UNCLASSIFIED 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 05/07/2012 


On April 20 


telephone number 
was interviewed telephonically. Atter being advised of the 
th of the interviewing Agent and the nature of the interview, 


provided the following information: 

stated [|__| received $7,500.00 in his b6 
checking account on or around October 18, b7C 
z Was questioned by bank officials regarding the deposit 

on a later date. LJ approached the and 

told them he was suspicious the deposit was fraudulent. stated 

that he sent a portion of the money overseas, and gave the rest 


back to the bank. offered to repay the portion he sent abroad. 
provided with a Western Union receipt 
letailing transactional information for the proceeds he sent 


overseas. 


provided writer with a copy of the Western Union 
receipt detailing transactional information which is enclosed in a 
1-A envelope. 


Investigation on 04/20/2011 a Little Rock, AR (telephonically) 
b3 
Fite # Date dictated b6é 
b7c 
by: SAI bT7E 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is toaned to your agency; 


it and its contents are not to be distributed outside your agency, 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 06/25/2012 


From: Knoxville 
Squad 11 
Contact: 


b3 
bé 
b7c 
b75 


Approved By: 
Drafted By: 
Case ID #: 
Title: UNSUB; : 

GIRL SCOUTS-DIAMONDS (VICTIM); 

COMPUTER INTRUSION 
Synopsis: To cover lead set forth by Little Rock Division. 
Details: Knoxville Division received a lead from Little Rock, 
requesting that a be interviewed pertinent to a 


computer intrusion case. Unfortunately, Knoxville was unable to 
lecate and interview[ | as requested. 


si__|visited] SS) 
[__|the address provided by Little Rock, on three separate ~ 
occasions. On all three occasions no one was present. 


The contact telephone number provided by Little Rock 
was called, however the number was no longer in service. 


Additional records checks_were run, however no other 


relevant information was found for Records 
indicated that a was associated with 
the address Little Rock provided. The phone numbers listed for 


were called, however none of the numbers belonged to 


spoke with the property manager of the a b3 
rv stated that a woman name 
lof thé apartment complex. The 


manager stated that was the only person on the lease and 
that no males had beén séen living or visiting the apartment. 


17q7 pi.ec UNCLASSIFIED 


KX lead marKecl 


coveted Hab — -—— [| 


® UNCLASSIFIED 6 
To: i From: Knoxville 
Re: (ee a 06/25/2012 b3 
bé 
bic 
bIE 


Knoxville Division believes it has exhausted all 
reasonable means to locate and contact Knoxville 


i s the lead covered, however remains open to contacting 
in the future should new contact information arise. 
LEAD (s)}: 


Set Lead 1: (Info) 


Little Rock 
AT Little Rock, AR 


Read and Clear. 


bad 
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FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


FD-1057 (Rev. 5-8-10} 


Title: (U) Response from[___| Date: 02/15/2013 
7 b3 

ae 6 
bic 
b7D 
b7E 

From: Lt 

eRrast: Po 

DREEANOA PaE [ 

Case ID #: [ ] (U) GIRL SCOUTS DIAMONDS - COMPUTER 

Synopsis: U) To document response from egarding Little Rock's 

request to 

Full Investigation Initiated: 11/02/2011 

Enclosure(s): Enclosed are the following items: 

Ms (U) Letter from 

Details: 

In referenced lead, Little Rock requested that forward the request 
b6 
b7C 
b7D 


Attached please 
has received from the 


find a letter in response to said request 


UNCLASSIFIED 


Ey 


UNCLASSIFIED 
Title: (U) Response trom[__ | 
b7E 
b7D 


considers this lead covered. Should additional information arise 
that would further enhance the chances of| 


LC ~=S@ina. assist accordingly. 
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FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 

DELETED PAGE INFORMATION SHEET 
FOI/PAH 1454579-000 


Total Deleted Page(s) = 5 
Page 5 ~ b6; b7C; b7E; 
Page 6 ~ b6; b7C; b7E; 
Page 7 ~ b6; b7C; b7E; 
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FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


FD-1057 (Rev. 5-8-10) 


Title: (U) Subfile Opening Document (Girl Scouts Date: 06/05/2015 
of America) 


From: NEW YORK 
NY-CY06 


b7Cc 


b3 


Financial, Corporate, Enterprise 
Spear Phishing; 

Business Email Compromise 
Schemes (BEC); 

VARIOUS SUBJECTS (UNSUB) 


Synopsis: (U) To open a new victim subfile 


Details: 


To open a new subfile specifically related to Girl Scouts of America as 
a victim. This is a consolidation of case which will 
be closed once this subfile is open. 


b3 
bIE 
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UNCLASSIFIED//$eue- 
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bIE 
UNCLASSIFIED/ /reve- 


FEDERAL BUREAU OF INVESTIGATION 


Electronic Communication 


FD-1057 (Rev. 5-8-10) 


Title: (U/APSUe&) Request an assessment be opened Date: 03/18/2015 
and assigned to determine a BusinessEmail 
Compromise 


From: NEW YORK 
NY-CY06 


b6 
b3 


bIE 
Case ID #: as | (U//PouoT GIRL SCOUTS OF AMERICA - 
VICTIM; 
UNSUB(S); BUSINESS EMAIL COMPROMISE 
b3 


the Girl Scouts of the USA, received a RIG 
fraudulent email from from an unknown subject (UNSUB) purporting to be 
a known vendor requesting an Electronic Funds Transfer (EFT) of 
$35,580.00 in United States Currency (USC) be transferred to a 
fraudulent account. 


Synopsis: (U/ OBS) By way of referral from e-mail,D—di b6 


Full Investigation Initiated: 03/18/2015 


Details: 


bic 


UNCLASSIFIED/ H6ue- 


Po 


UNCLASSIFIED/ /Feue 


Title: (U/ APOSO} Request an assessment be opened and assigned to 
determine a BusinessEmail Compromise 


rer [-—] 03/19/2015 


SCOUTS OF THE USA (GSUSA), 


she was notified by her company about a fraudulent wire transfer from a 


420 Fifth Avenue New York, Ny 10018, phone: 


reported that 


spoofed internal company email. The IT department traced the fraud 


email to the desktop of employee[ =| 


(GSUSA), 420 Fifth Avenue New York, NY 10018, phone: 
received an email that appeared to be from the GSUSA 


The senders email address was displayed as 


The email requested to 


at IBERIABANK. 


— 


transfer 


GSUSA wired the funds to IBERABANK from the companies BNY MELLON 


account. Only after the 


request was unauthorized and fraudulent. 


wire was sent, the company discovered the email 
IT department discovered the 


email address behind the fraudulent CEO email was 


tro[___] Request an assessment be opened and assigned to determine 
the route of the Business Email Compromise 


++ 


GSUSA filed reports with iCc3 


UNCLASSIFIED/ /Peue 
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(report # 
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bIE 
UNCLASSIFIED/ Arese- 


FEDERAL BUREAU OF INVESTIGATION 


Import Form 


FD-1036 (Rev. 10-16-2009) 


Form Type: OTHER Date: 07/23/2015 


Title: (U) IC3 Complaint by Girl Scouts 


b7c 


Financial, Corporate, Enterprise 
Spear Phishing; 

Business Email Compromise 
Schemes (BEC); 

VARIOUS SUBJECTS (UNSUB) 


Synopsis: (U) IC3 Complaint by Girl Scouts 
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Electronic Communication 


FD-1057 (Rev. 5-8-10) 


Title: (U//Peve) (GIRL SCOUTS of AMERICA) FGUJS Date: 06/25/2015 
Riders submitted for processing 


ce: bé 
bc 


From: NEW YORK 


NY-CY06 
b7C 
b3 


Case ID #: Lid (U/ BE8S+ PHISH-HOOK; 


Financial, Corporate, Enterprise Spear 
Phishing; 

Business Email Compromise Schemes (BEC); 
VARIOUS SUBJECTS (UNSUB) 


PEDERAL GRAND JURY MATERIAL - DISSEMINATE PURSUANT TO RULE 6(E) 
Do not disseminate except as authorized by federal rule of criminal procedure 
6(e). 


Synopsis: (U//68e+ To submit subpoena riders to the United States 
Attorneys Office (USAOQ) for_Non—-Disclosure Order (NDO) and subpoena 
process to the appropriate b3 


Enclosure(s): Enclosed are the following items: 
(U) Investigative support documents 
U/APeU@) Investigative support documents 
U//Fe3e) Investigative support documents 


U//#e8e+ Investigative support documents 


no eswWNe 


( 
( 
(U/ -Pe8er- Investigative support documents 
( 
( 


U/ ARB} Investigative support documents 


UNCLASSIFIED/ Aneve- 
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UNCLASSIFIED/ AFOUC" 
Title: (U/APe8&} (GIRL SCOUTS of AMERICA) FGJS Riders submitted for 
processin 


Details: 


This writer reviewed full email header(s) provided by [=e Se 
CL S™~—CXdSiBnee GIRL SCOUTS OF THE USA (GSUSA), located at 420 


Fifth Avenue New York, NY 10018, phone: ae via email: 


This information was pertaining to a fraudulent email sent tol 
GSUSA, that appeared to be from 
The UNSUB 


senders email address was displayed as Lo directing 


to initiate a wire transfer to an account in a financial 
institution of UNSUBs choosing and control. 


A synopsis of the full email headers are as follows: 


Email # 1 


Actual Sending Email: 


The following riders were submitted to the USAO for immediate FGJS 
process with NDOs to be issued via the Southern District of New York. 
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b3 
bTE 


b3 
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bIE 
UNCLASSIFIED/ /Sese- 


Title: (U/APS8S) (GIRL SCOUTS of AMERICA) FGJS Riders submitted for 


processin 
e b3 
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FD-136 (Rev. 10-16-2009) 
UNCLASSIFIED/ /Feve 
FEDERAL BUREAU OF INVESTIGATION 
Import Form 
Form Type: EMAIL Date: 04/07/2015 
Title:(U) Identified victimL————sd’ b3 
bIE 


b6 


Approved By: a RIS 
Case ID #: [sd (U//POSS) GIRL SCOUTS OF AMERICA -— 


VICTIM; 
UNSUB(S); BUSINESS EMAIL COMPROMISE 


Synopsis: (U) This E-mail serve to identify a federal crime victim in 


A Victim Notification Letter will be mailed to the b3 


business victim. bIE 


+o 


UNCLASSIFIED/ eve 


From: 


Sent: Monday, April 06, 2015 6:23 PM 
To: 

Subject: 

SentinelCaseld: NON-RECORD 


Classification: UNCLASSIFIED 


whe is my point of contact. 


Classification: UNCLASSIFIED 


Thank you 


To whom may | address the victim notification fet 


From: 


Sent: Monday, April 06, 2015 10:51 AM 
To: 
Subject: 


Classification: UNCLASSIFIED 


ed to the new com 


maven you f 


ISA 


b6 
b7Cc 
b3 
b7E 


From{_ bs 


Sent: Friday, March 27, 2015 9:56 AM BIC 
To: b3 
Subject: bTE 


Classification: UNCLASSIFIED 


e full name anc 
d send outa 


ii will upload the E-mail, 


Can you phaase & 
index the org, and expe 


b6 
Classification: UNCLASSIFIED b7¢ 
b3 
b7E 


Classification: UNCLASSIFIED 


dated my paint of tions, don’ . Thanks 


ES 


Is there a POC at Girl Scouts of America? 


If so, kindly please provide the POC name and address so | can send out a Victim Notification 
Letter. 


Thank you very much. 


ied 


Classification: UNCLASSIFIED 


Classification: UNCLASSIFIED 


Classification: UNCLASSIFIED 


Classification: UNCLASSIFIED 


Classification: UNCLASSIFIED 


Classification: UNCLASSIFIED 


